Back to plugin list
splunk
Official

Splunk

This plugin is in preview.

The Splunk destination plugin syncs data from any CloudQuery source plugin(s) to Splunk

Publisher

cloudquery

Latest version

v0.1.2

Type

Destination

Platforms
Date Published

Price

Free

Overview #

Splunk Destination Plugin

The Splunk plugin syncs data from any CloudQuery source plugin(s) to a Splunk cluster.

Example config #

kind: destination
spec:
  name: splunk
  path: cloudquery/splunk
  registry: cloudquery
  version: "v0.1.2"
  write_mode: "append"
  spec:
    # Splunk Cloud configuration parameters
    host: "${SPLUNK_HOST}"
    port: 8088
    hec_token: "${SPLUNK_HEC_TOKEN}"
    
    # Optional parameters
    # tls: true
    # index: main
    # concurrency: 16
    # batch_size: 1000
    # batch_size_bytes: 5242880
The Splunk destination utilizes batching, and supports batch_size and batch_size_bytes.
It supports append mode only for write_mode.

Splunk Spec #

This is the spec used by the Splunk destination plugin.
  • host (string) (optional) (default: "localhost")
    Host of the Splunk instance. Can be local or remote.
  • port (integer) (optional) (default: 8088)
    Port of the Splunk instance.
  • hec_token (string) (required)
    Splunk HEC token. Go to Settings -> Data Inputs -> HTTP Event Collector -> New Token to create a new token. https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/UsetheHTTPEventCollector
  • batch_size (integer) (optional) (default: 1000)
    Maximum number of items that may be grouped together to be written in a single write.
  • batch_size_bytes (integer) (optional) (default: 5242880 (5 MiB))
    Maximum size of items that may be grouped together to be written in a single write.



© 2024 CloudQuery, Inc. All rights reserved.