Splunk Dev

flume http sink to Splunk HEC?

driekhof
Path Finder

How to set the the HEC token value in the flume http sink configuration?

flume http sink has the following header props, but neither look like the right thing:

acceptHeader
contentTypeHeader

Anyone had successful experience sinking data from flume into Splunk in some other way?

Tags (1)
0 Karma

codebuilder
SplunkTrust
SplunkTrust

I've personally used StreamSets to solve this very issue. It's Open Source (aside from enterprise support), easy to use, and EXTREMELY powerful.

It sits between your source and destination, or vice versa, and with a slick UI can accomplish exactly what you want to do.

https://streamsets.com/documentation/datacollector/latest/help/datacollector/UserGuide/Destinations/...

----
An upvote would be appreciated and Accept Solution if it helps!
0 Karma
Get Updates on the Splunk Community!

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...

Want to Reduce Costs, Mitigate Risk, Improve Performance, or Increase Efficiencies? ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...