Send json response data to Splunk via the HTTP Event Collector Requires the following config values to be specified in config or pillar:
splunk_http_forwarder:
token: <splunk_http_forwarder_token>
indexer: <hostname/IP of Splunk indexer>
sourcetype: <Destination sourcetype for data>
index: <Destination index for data>
verify_ssl: true
Run a test by using salt-call test.ping --return splunk
Written by Scott Pack (github.com/scottjpack)
salt.returners.splunk.
http_event_collector
(token, http_event_server, host='', http_event_port='8088', http_event_server_ssl=True, max_bytes=100000, verify_ssl=True)¶batchEvent
(payload, eventtime='')¶flushBatch
()¶sendEvent
(payload, eventtime='')¶salt.returners.splunk.
returner
(ret)¶Send a message to Splunk via the HTTP Event Collector