Optional additionalA container for additional, undeclared properties. This is a holder for any undeclared properties as specified with the 'additionalProperties' keyword in the OAS document.
Optional addressName of the environment variable or secret that holds the listen address for the HEC API.
The unique identifier for this component. Used in other parts of the pipeline to reference this component (for example, as the input to downstream components).
Optional storeWhen true, the Splunk HEC token from the incoming request is stored in the event metadata.
This allows downstream components to forward the token to other Splunk HEC destinations.
Optional tlsConfiguration for enabling TLS encryption between the pipeline component and external connecting clients.
The source type. Always splunk_hec.
Optional validA list of tokens that are accepted for authenticating incoming HEC requests. When set, the source rejects any request whose HEC token does not match an enabled entry in this list.
Generated using TypeDoc
The
splunk_hecsource implements the Splunk HTTP Event Collector (HEC) API.Supported pipeline types: logs