splunk-hec

Splunk HEC Example

This example showcases how the collector can send data to a Splunk Enterprise deployment over the Docker logging driver.

The example runs as a Docker Compose deployment. The collector can be configured to send logs to Splunk Enterprise.

Splunk is configured to receive data from the OpenTelemetry Collector using the HTTP Event collector. To learn more about HEC, visit our guide.

To deploy the example, check out this git repository, open a terminal and in this directory type:

$> docker-compose up --build

Splunk will become available on port 18000. You can login on http://localhost:18000 with admin and changeme.

Once logged in, visit the search application to see the logs collected by Splunk.