PutSplunkHTTP 2025.10.9.21

Bundle

org.apache.nifi | nifi-splunk-nar

Description

Sends flow file content to the specified Splunk server over HTTP or HTTPS. Supports HEC Index Acknowledgement.

Tags

http, logs, splunk

Input Requirement

REQUIRED

Supports Sensitive Dynamic Properties

false

Properties

PropertyDescription
HostnameThe ip address or hostname of the Splunk server.
OwnerThe owner to pass to Splunk.
PasswordThe password to authenticate to Splunk.
PortThe HTTP Event Collector HTTP Port Number.
SchemeThe scheme for connecting to Splunk.
Security ProtocolThe security protocol to use for communicating with Splunk.
TokenHTTP Event Collector token starting with the string Splunk. For example ‘Splunk 1234578-abcd-1234-abcd-1234abcd’
UsernameThe username to authenticate to Splunk.
character-setThe name of the character set.
content-typeThe media type of the event sent to Splunk. If not set, “mime.type” flow file attribute will be used. In case of neither of them is specified, this information will not be sent to the server.
hostSpecify with the host query string parameter. Sets a default for all events when unspecified.
indexIndex name. Specify with the index query string parameter. Sets a default for all events when unspecified.
request-channelIdentifier of the used request channel.
sourceUser-defined event source. Sets a default for all events when unspecified.
source-typeUser-defined event sourcetype. Sets a default for all events when unspecified.

Relationships

NameDescription
failureFlowFiles that failed to send to the destination are sent to this relationship.
successFlowFiles that are sent successfully to the destination are sent to this relationship.

Writes attributes

NameDescription
splunk.acknowledgement.idThe indexing acknowledgement id provided by Splunk.
splunk.responded.atThe time of the response of put request for Splunk.

See also