topic Re: Sending data stream to POST receivers/stream endpoint in Splunk Dev

Sending data stream to POST receivers/stream endpoint

misteryuku — Fri, 06 Apr 2012 14:03:56 GMT

If i want to send the raw event text to the POST receivers/stream endpoint, the raw data is streamed in as OutputStream data type in Java?

Re: Sending data stream to POST receivers/stream endpoint

Damien_Dallimor — Fri, 06 Apr 2012 23:40:20 GMT

Here is a very simple pseudo-code example showing the Object Types :

Service service = Service.connect(...);
Index index = service.getIndexes().get("someindex");
Socket socket = index.attach();
OutputStream ostream = socket.getOutputStream();
Writer writerOut = new OutputStreamWriter(ostream, "UTF8");

//stream 10 events to Splunk
for (int i=0; i<10; i++) {
  writerOut.write("Some data I want to stream to Splunk");
}

writerOut.flush();
writerOut.close();
socket.close();

Re: Sending data stream to POST receivers/stream endpoint

misteryuku — Sat, 07 Apr 2012 10:11:08 GMT

May i know which Logback appender should i use if i want to create new events using the Splunk's REST receivers endpoint if i'm using logback framework. because i went to make a custom basic appender for that? Is it socket appender?

Re: Sending data stream to POST receivers/stream endpoint

Damien_Dallimor — Sun, 08 Apr 2012 06:09:42 GMT

If your original question was answered it would be good if you could start "accepting" answers.
It helps out splunkbase.