The Splunk Connector sends log messages to a Splunk server using the Splunk HTTP Event Collector. This connector will start to send log events to Splunk when the connector is enabled and ready.
Splunk Connector Properties
| Property | Description | Required |
|---|---|---|
| URL | The Splunk HTTP Event Collection (HEC) URL to connecet to. | Yes |
| Host | The host value to be assigned to the event data. The %hostname% macro can be used to assign the hostname of the system running VersaLex to the key. | Yes |
| Source | The source value to be assigned to events. The %serial% macro can be used to assign the VersLex serial number to this key. | |
| Sourcetype | The sourcetype value to be assigned to events. | |
| Index | The name of the index by which the event data is to be indexed. | |
| Token | The HEC token to use when sending data to Splunk. | Yes |
| Log Level | The level of logs to send events for. Not that the debug log level does not replicate the System Debug within VersaLex. To send all events logged to VeraLe's System Log File to Splunk, this setting should be set to DEBUG. | Yes |
| Batch Count | Maximum number of events to send in a single batch. | Yes |
| Batch Size | Maximum size of a single batch in bytes. | Yes |
| Batch Interval | Maximum time (in milliseconds) between sending batches. | Yes |
| Connect Timeout | The amount of time (in seconds) VersaLex should wait for a connection before timing out. | Yes |
| Call Timeout | The amount of time (in seconds) Harmony should wait for a response before timing out. Setting this value to '0' disables timeout. | Yes |
| Read Timeout | The maximum amount of time (in seconds) Splunk should wait for a payload before timing out. | Yes |
| Write Timeout | The maximum time (in seconds) Splunk should allow for writing incoming data before timing. | Yes |
| Termination Timeout | The maximum time (in seconds) Splunk should waits for a connection or data transfer before timing out. | Yes |
| Disable Cert Validation | Select this option to disable certificate validation to allow for self-signed certificates. | |
| Queue Size | The number of events to be held in memory. If events back up due to issues sending events to Splunk and exceed this value, the events in the queue will not be sent to the Splunk server. | |
| Enable Debug | Select this option to enable debug-level logging. |
Comments
0 comments
Please sign in to leave a comment.