When using the Sink Connector and writing logs from kafka to Splunk, as part of the HEC request, I would also like to pass a different host to the one that gets passed automatically (ex: log_data instead of the default localhost:8088). We need this identifier to identify the source of incoming logs into Splunk. Can this be accomplished?
HEC Request being sent from Kafka to Splunk now :
{“event”:{“data”:[{“name”:”somebody”,”id”:”100″}]}}
When using the Sink Connector and writing logs from kafka to Splunk, as part of the HEC request, I would also like to pass a different host to the one that gets passed automatically (ex: log_data instead of the default localhost:8088). We need this identifier to identify the source of incoming logs into Splunk. Can this be accomplished?
HEC Request being sent from Kafka to Splunk now : {“event”:{“data”:[{“name”:”somebody”,”id”:”100″}]}}
HEC Request required: {“host”:”log_data”, “event”:{“data”:[{“name”:”somebody”,”id”:”100″}]}}
Thanks