Producer Endpoints: - 6.3

Talend ESB Mediation Developer Guide

EnrichVersion
6.3
EnrichProdName
Talend Data Fabric
Talend Data Services Platform
Talend ESB
Talend MDM Platform
Talend Open Studio for ESB
Talend Real-Time Big Data Platform
task
Design and Development
EnrichPlatform
Talend ESB

Endpoint

Description

stream

Streams data to a named index or the default if not specified.

When using stream mode be aware of that Splunk has some internal buffer (about 1MB or so) before events gets to the index.

If you need realtime, better use submit or tcp mode.

submit

submit mode. Uses Splunk rest api to publish events to a named index or the default if not specified.

tcp

tcp mode. Streams data to a tcp port, and requires a open receiver port in Splunk.

When publishing events the message body should contain a SplunkEvent.

Example

from("direct:start").convertBodyTo(SplunkEvent.class)
    .to("splunk://submit?username=user&password=123&index=myindex&sourceType=
    someSourceType&source=mySource")...

In this example a converter is required to convert to a SplunkEvent class.