Optional additionalA container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.
Optional autoIf true, Splunk tries to extract timestamps from incoming log events.
If false, Splunk assigns the time the event was received.
Only applies when endpoint_target is event; cannot be true when endpoint_target is raw.
Optional bufferConfiguration for buffer settings on destination components.
Optional encodingEncoding format for log events.
Optional endpointThe Splunk HEC endpoint to send events to. Use event to send structured events to the /event endpoint, or raw to send the raw message to the /raw endpoint.
Optional endpointName of the environment variable or secret that holds the Splunk HEC endpoint URL.
The unique identifier for this component. Used in other parts of the pipeline to reference this component (for example, as the input to downstream components).
Optional indexOptional name of the Splunk index where logs are written.
Optional indexedList of log field names to send as indexed fields to Splunk HEC. Available only when encoding is json.
A list of component IDs whose output is used as the input for this component.
Optional sourcetypeThe Splunk sourcetype to assign to log events.
Optional tokenName of the environment variable or secret that holds the Splunk HEC token.
Optional tokenControls how the Splunk HEC token is supplied. Use custom to provide a token with token_key, or from_source to forward the token received from an upstream Splunk HEC source.
The destination type. Always splunk_hec.
Generated using TypeDoc
The
splunk_hecdestination forwards logs to Splunk using the HTTP Event Collector (HEC).Supported pipeline types: logs