All Apps and Add-ons

Does the AMQP Messaging Modular Input support AVRO as the transport format?

hsesterhenn_spl
Splunk Employee
Splunk Employee

Hi,

Customer has data in AMQP message bus. Data is encoded using AVRO.
Assume binary format, not JSON.

Questions:

Is there a need for an additional message handler described here?
https://github.com/damiendallimore/SplunkModularInputsJavaFramework/tree/master/amqp/src/com/splunk/...

What about scaling?
If it comes to hundreds of MB per second (>500k messages/second…) how would you architect a scaling ingestion tier?

Thanks,

Holger

0 Karma

Damien_Dallimor
Ultra Champion

1) to decode a binary payload such as Avro you will need to implement a custom message handler , such as this example . There are Avro deserialization libraries available , so this should be quite easy.

2) Read this slide deck from slide 20 to get an idea about horizontal scalability.

0 Karma
Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

[Puzzles] Solve, Learn, Repeat: Nested loops in Event Conversion

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...