# Splunk HEC Data Sink

Learn more about this Data sink type in [this article](/the-workspace/data-sinks/data-sink-integrations/send-data-to-splunk.md).

<details>

<summary>v2.0.1</summary>

<mark style="background-color:purple;">**Released on**</mark> <mark style="background-color:purple;"></mark><mark style="background-color:purple;">04/30/2026</mark>

#### Enhancements

* Fields now can be sent as its values instead of strings.

#### Bug Fixes

* Fixed race condition causing panics on gzip compression.

</details>

<details>

<summary>v2.0.0</summary>

<mark style="background-color:purple;">**Released on**</mark> <mark style="background-color:purple;"></mark><mark style="background-color:purple;">12/03/2025</mark>

#### Enhancements

* Add option to send fields
* Redesign user interface
* Move sourceType to pipeline config
* Make channel available for token auth

</details>

<details>

<summary>v1.0.1</summary>

<mark style="background-color:purple;">**Released on**</mark> <mark style="background-color:purple;"></mark><mark style="background-color:purple;">06/24/2025</mark>

* Better support for batch max size and gzip compression.
* Support authentication tokens not starting with `Splunk`.

</details>

<details>

<summary>v1.0.0</summary>

<mark style="background-color:purple;">**Released on**</mark> <mark style="background-color:purple;"></mark><mark style="background-color:purple;">04/30/2025</mark>

* Redesigned user interface.
* Added support for mTLS.
* Metadata input fields now support default values and literals.
* Added bulk max size in bytes.

</details>

<details>

<summary>v0.0.5</summary>

<mark style="background-color:purple;">**Released on**</mark> <mark style="background-color:purple;"></mark><mark style="background-color:purple;">12/15/2024</mark>

* UI improvements to the properties window using conditional fields.

</details>

<details>

<summary>v0.0.4</summary>

<mark style="background-color:purple;">**Released on**</mark> <mark style="background-color:purple;"></mark><mark style="background-color:purple;">12/02/2024</mark>

* Source type removed and added to the Pipeline configuration.

</details>

<details>

<summary>v0.0.3</summary>

<mark style="background-color:purple;">**Released on**</mark> <mark style="background-color:purple;"></mark><mark style="background-color:purple;">10/18/2024</mark>

* Splunk Instance URL shouldn't always have to specify port 8088.
* Splunk RAW concatenates logs into a single string.
* Field name included in JSON request removed.

</details>

<details>

<summary>v0.0.2</summary>

<mark style="background-color:purple;">**Released on**</mark> <mark style="background-color:purple;"></mark><mark style="background-color:purple;">08/05/2024</mark>

Minor bug fixing

</details>

<details>

<summary>v0.0.1</summary>

<mark style="background-color:purple;">**Released on**</mark> <mark style="background-color:purple;"></mark><mark style="background-color:purple;">05/13/2024</mark>

Initial version

</details>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.onum.com/data-sinks/splunk-hec-data-sink.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.