Event Forwarder Splunk Output

The Event Forwarder Splunk destination type requires the following information.

Parameter	Description
Splunk HEC Endpoint	Required URL of the Splunk destination endpoint; for example, http://www.example.com .
HEC Token	Required token for HEC authorization.
Server Common Name	Optional. Common name (CN) of the destination server.
Send Timeout	Optional. Maximum duration of an upload connection. The default value is 60 seconds.
Upload Empty Files	Optional. Determines whether zero byte length files are uploaded. The default setting is false.
Max Bundle Size	Optional. The maximum bundle size (in bytes) to upload to the remote destination before compression is applied. The default value is 10MB.
Certificates and Credentials	Optional. Determines whether an uploaded certificate (identified by type) is required for the connection. Also allows you to specify AWS credentials.