The field name that contains the Splunk index name. Cannot set both index and index_key parameters at the same time. If this parameter is not set, the indexer is chosen by HEC. Identifier for the Splunk index to be used for indexing events. If coerce_to_utf8 is set to true, any non-UTF-8 character is replaced by the string you specify in this parameter. If set to false, the Ingest API errors out any non-UTF-8 characters.ĭefault: true non_utf8_replacement_string (string, optional) If set to true, any non-UTF-8 character is replaced by the string specified in non_utf8_replacement_string. Indicates whether to allow non-UTF-8 characters in user logs. When this prameter is set, the metrics_from_event parameter is automatically set to false.ĭefault: true metric_value_key (string, optional)įield name that contains the metric value, this parameter is required when metric_name_key is configured.ĭefault: - coerce_to_utf8 (*bool, optional) This parameter only works in conjunction with the metrics_from_event parameter. (Default:true)ĭefault: - metric_name_key (string, optional)įield name that contains the metric name. Set metrics_from_event to false to disable this behavior and use metric_name_key and metric_value_key to define metrics. When data_type is set to “metric”, the ingest API will treat every key-value pair in the input event as a metric name-value pair. Available values are: http, https.ĭefault: https hec_token (*secret.Secret, required)ĭefault: - metrics_from_event (*bool, optional) This is the protocol to use for calling the Hec API. The port number for the Hec token or the Hec load balancer.ĭefault: 8088 protocol (string, optional) You can specify SplunkHec host by this parameter. The type of data that will be sent to Sumo Logic, either event or metricĭefault: event hec_host (string, required) SplunkHecOutput sends your logs to Splunk via Hec data_type (string, optional) Spec : splunkHec : hec_host : .local hec_port : 8088 protocol : http Configuration SplunkHecOutput

Multiple Fluent Bit agents in the cluster.Kubernetes events, node logs, and logfiles.

Hec in splunk