...
The Splunk component provides access to Splunk using , via the Splunk provided client api, and it enables Rest API, allowing you to publish and search for events in Splunk.
...
Div |
---|
class | confluenceTableSmall |
---|
|
Name | Default Value | Context | Description |
---|
host
| localhost
| Both | Splunk host. | port
| 8089
| Both | Splunk port. | scheme
| https
| Both | Scheme to use. Can be one of: HTTP or HTTPS . | username
| null
| Both | Splunk username. | password
| null
| Both | Splunk password. | connectionTimeout
| 5000
| Both | Splunk server connection timeout, in milliseconds. | useSunHttpsHandler
| false
| Both | When true an instance of sun.net.www.protocol.https.Handler is used to establish the connection to Splunk. Can be useful when running in application servers to avoid application server HTTPS handling. | sslProtocol
| TLSv1.2
| Both | Camel 2.16: The SSL protocol to use. Can be one of: TLSv1.2 , TLSv1.1 , TLSv1 , SSLv3 . Note: this option is ignored unless the scheme is HTTPS . | index
| null
| Producer | Splunk index to write to. | sourceType
| null
| Producer | Splunk sourcetype argument. | source
| null
| Producer | Splunk source argument. | tcpReceiverPort
| 0 | Producer | Splunk TCP receiver port when using TCP producer endpoint. | raw | false
| Producer | Camel 2.16.0 : Governs whether the body should be inserted as raw. If true , the body will be transformed to a java.lang.String before it's send to Splunk. | initEarliestTime
| null
| Consumer | Initial start offset of the first search. Required. | earliestTime
| null
| Consumer | Earliest time of the search time window. | latestTime
| null
| Consumer | Latest time of the search time window. | count
| 0
| Consumer | A number that indicates the maximum number of entities to return. Warning |
---|
This is not the same as maxMessagesPerPoll option, which currently is unsupported. |
| search
| null
| Consumer | The Splunk query to run. | savedSearch
| null
| Consumer | The name of the query saved in Splunk to run. | streaming
| false
| Consumer | Camel 2.14.0 : Stream exchanges as they are received from Splunk, rather than returning all of them in one batch. This has the benefit of receiving results faster, as well as requiring less memory as exchanges aren't buffered in the component. | eventHost
| null
| Producer | Camel 2.17: Override the default Splunk event host field. |
|
...