All Apps and Add-ons

What are the pros and cons of using the HTTP Event Collector versus a standard TCP input feed?

Champion

Hi,

What are the pros and cons of using the HTTP Event Collector (HEC) vs. a standard TCP input feed? We are looking to take data from Kafka and/or Apache Nifi, and trying to determine the best option.

0 Karma
1 Solution

Ultra Champion

Don't forget the Kafka add ons. If you want a pull model there Splunk Add-on for Kafka. For a push model, I believe HEC is the recommended approach. There is also Kafka Messaging Modular Input written by a lead Splunker.

Related blog posts: http://blogs.splunk.com/?s=kafka

0 Karma

Champion

Awesome. Thanks!

0 Karma

SplunkTrust
SplunkTrust

i converted this to an answer, please mark it as such.

Contributor

This practice was discouraged in Stackoverflow, so I added it to only comments. But, love to get few reputations on this as well. Thanks!

0 Karma