Splunk HEC Data Sink

Most recent version: v2.0.0

Learn more about this Data sink type in this article.

v2.0.0

Released on 12/03/2025

Enhancements

• Add option to send fields

• Redesign user interface

• Move sourceType to pipeline config

• Make channel available for token auth

v1.0.1

Released on 06/24/2025

• Better support for batch max size and gzip compression.

• Support authentication tokens not starting with Splunk.

v1.0.0

Released on 04/30/2025

• Redesigned user interface.

• Added support for mTLS.

• Metadata input fields now support default values and literals.

• Added bulk max size in bytes.

v0.0.5

Released on 12/15/2024

• UI improvements to the properties window using conditional fields.

v0.0.4

Released on 12/02/2024

• Source type removed and added to the Pipeline configuration.

v0.0.3

Released on 10/18/2024

• Splunk Instance URL shouldn't always have to specify port 8088.

• Splunk RAW concatenates logs into a single string.

• Field name included in JSON request removed.

v0.0.2

Released on 08/05/2024

Minor bug fixing

v0.0.1

Released on 05/13/2024

Initial version