flume http sink to Splunk HEC?

[driekhof]

How to set the the HEC token value in the flume http sink configuration?

flume http sink has the following header props, but neither look like the right thing:

acceptHeader
contentTypeHeader

Anyone had successful experience sinking data from flume into Splunk in some other way?

[codebuilder]

I've personally used StreamSets to solve this very issue. It's Open Source (aside from enterprise support), easy to use, and EXTREMELY powerful.

It sits between your source and destination, or vice versa, and with a slick UI can accomplish exactly what you want to do.

https://streamsets.com/documentation/datacollector/latest/help/datacollector/UserGuide/Destinations/...