Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Div
classconfluenceTableSmall
8089eventHostCamel 2.17:  Override the default Splunk event host field

Name

Default Value

Context

Description

hostconnectionTimeout

localhost5000

Both

Splunk hostserver connection timeout, in milliseconds.port

count

0

Both

Splunk port.

scheme

https

Both

Scheme to use. Can be one of: HTTP or HTTPS.

username

null

Both

Splunk username.

password

null

Both

Splunk password.

connectionTimeout

5000

Both

Splunk server connection timeout, in milliseconds.

useSunHttpsHandler

false

Both

When true an instance of sun.net.www.protocol.https.Handler is used to establish the connection to Splunk.

Can be useful when running in application servers to avoid application server HTTPS handling.

sslProtocol

TLSv1.2

Both

Camel 2.16: The SSL protocol to use. Can be one of: TLSv1.2TLSv1.1, TLSv1, SSLv3.

Note: this option is ignored unless the scheme is HTTPS.

index

null

Producer

Splunk index to write to.

sourceType

null

Producer

Splunk sourcetype argument.

source

null

Producer

Splunk source argument.

Consumer

A number that indicates the maximum number of entities to return.

Warning

This is not the same as maxMessagesPerPoll option, which currently is unsupported.

earliestTime

null

Consumer

Earliest time of the search time window.

eventHost

null

Producer

Camel 2.17:  Override the default Splunk event host field.

host

localhost

Both

Splunk host.

index

null

Producer

Splunk index to write to.

initEarliestTime

null

Consumer

Initial start offset of the first search. Required.

latestTime

null

Consumer

Latest time of the search time window.

password

null

Both

Splunk password.

port

8089

Both

Splunk port

tcpReceiverPort

0

Producer

Splunk TCP receiver port when using TCP producer endpoint.

raw

false

Producer

Camel 2.16.0 : Governs whether the body should be inserted as raw.

If true, the body will be transformed to a java.lang.String before it's send to Splunk.

initEarliestTimesavedSearch

null

Consumer

Initial start offset of the first search. Required.

earliestTime

null

Consumer

Earliest time of the search time window.

The name of the query saved in Splunk to run.

scheme

https

Both

Scheme to use. Can be one of: http or https.

searchlatestTime

null

ConsumerLatest

time of the search time windowThe Splunk query to run.

countsource

0null

Consumer

A number that indicates the maximum number of entities to return.

 

Warning

This is not the same as maxMessagesPerPoll option, which currently is unsupported.

search

null

Consumer

The Splunk query to run.

Producer

Splunk source argument.

sourceType

null

Producer

Splunk sourcetype argument.

sslProtocol

TLSv1.2

Both

Camel 2.16: The SSL protocol to use. Can be one of:

  • TLSv1.2
  • TLSv1.1
  • TLSv1
  • SSLv3

Note: this option is ignored unless the scheme is: https

savedSearch

null

Consumer

The name of the query saved in Splunk to run.

streaming

false

Consumer

Camel 2.14.0 : Stream exchanges as they are received from Splunk, rather than returning all of them in one batch. This has the benefit of receiving results faster, as well as requiring less memory as exchanges aren't buffered in the component.

tcpReceiverPort

0

Producer

Splunk TCP receiver port when using TCP producer endpoint.

username

null

Producer

Both

Splunk username.

useSunHttpsHandler

false

Both

When true an instance of sun.net.www.protocol.https.Handler is used to establish the connection to Splunk.

Can be useful when running in application servers to avoid application server HTTPS handling

.

Message Body

Splunk operates on data in key/value pairs. The SplunkEvent class is a placeholder for such data, and should be in the message body for the producer. Likewise it will be returned in the body per search result for the consumer.

...