https://community.splunk.com/t5/Splunk-Dev/flume-http-sink-to-Splunk-HEC/m-p/482544#M8592 <P>How to set the the HEC token value in the flume http sink configuration?</P> <P>flume http sink has the following header props, but neither look like the right thing:</P> <P>acceptHeader<BR /> contentTypeHeader</P> <P>Anyone had successful experience sinking data from flume into Splunk in some other way?</P> Tue, 12 Nov 2019 19:16:38 GMT driekhof 2019-11-12T19:16:38Z https://community.splunk.com/t5/Splunk-Dev/flume-http-sink-to-Splunk-HEC/m-p/482544#M8592 <P>How to set the the HEC token value in the flume http sink configuration?</P> <P>flume http sink has the following header props, but neither look like the right thing:</P> <P>acceptHeader<BR /> contentTypeHeader</P> <P>Anyone had successful experience sinking data from flume into Splunk in some other way?</P> Tue, 12 Nov 2019 19:16:38 GMT https://community.splunk.com/t5/Splunk-Dev/flume-http-sink-to-Splunk-HEC/m-p/482544#M8592 driekhof 2019-11-12T19:16:38Z https://community.splunk.com/t5/Splunk-Dev/flume-http-sink-to-Splunk-HEC/m-p/482545#M8593 <P>I've personally used StreamSets to solve this very issue. It's Open Source (aside from enterprise support), easy to use, and EXTREMELY powerful.</P> <P>It sits between your source and destination, or vice versa, and with a slick UI can accomplish exactly what you want to do.</P> <P><A href="https://streamsets.com/documentation/datacollector/latest/help/datacollector/UserGuide/Destinations/Flume.html">https://streamsets.com/documentation/datacollector/latest/help/datacollector/UserGuide/Destinations/Flume.html</A></P> Fri, 15 Nov 2019 04:48:37 GMT https://community.splunk.com/t5/Splunk-Dev/flume-http-sink-to-Splunk-HEC/m-p/482545#M8593 codebuilder 2019-11-15T04:48:37Z