Skip to main content
Version: Next

Splunk HEC

Use this output type to send NFO data to Splunk HEC input.

ParameterDescription
ProtocolHTTP or HTTPS
AddressDestination IP address where NFO sends events for Splunk HEC
PortDestination port number
Access tokenSplunk HEC Access token
Max batch sizeBuffer size in bytes. When the number of bytes in the buffer reached its size NFO data is pushed out
Flush timeoutTime in msec when NFO data is sent out, even if the batch size is not reached its maximum