salt.returners.splunk¶

Send json response data to Splunk via the HTTP Event Collector Requires the following config values to be specified in config or pillar:

splunk_http_forwarder:
  token: <splunk_http_forwarder_token>
  indexer: <hostname/IP of Splunk indexer>
  sourcetype: <Destination sourcetype for data>
  index: <Destination index for data>
  verify_ssl: true

Run a test by using salt-call test.ping --return splunk

Written by Scott Pack (github.com/scottjpack)

salt.returners.splunk.event_return(events)¶

Return events to Splunk via the HTTP Event Collector. Requires the Splunk HTTP Event Collector running on port 8088. This is available on Splunk Enterprise version 6.3 or higher.

class salt.returners.splunk.http_event_collector(token, http_event_server, host='', http_event_port='8088', http_event_server_ssl=True, max_bytes=100000, verify_ssl=True)¶

sendEvent(payload, eventtime='')¶

salt.returners.splunk.returner(ret)¶

Send a message to Splunk via the HTTP Event Collector. Requires the Splunk HTTP Event Collector running on port 8088. This is available on Splunk Enterprise version 6.3 or higher.