-
Notifications
You must be signed in to change notification settings - Fork 6.9k
[Logs] Update Logpush to Splunk #23114
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Howdy and thanks for contributing to our repo. The Cloudflare team reviews new, external PRs within two (2) weeks. If it's been two weeks or longer without any movement, please tag the PR Assignees in a comment. We review internal PRs within 1 week. If it's something urgent or has been sitting without a comment, start a thread in the Developer Docs space internally. PR Change SummaryUpdated Logpush documentation to unify references to Splunk and enhance clarity on using the HTTP Event Collector.
Modified Files
How can I customize these reviews?Check out the Hyperlint AI Reviewer docs for more information on how to customize the review. If you just want to ignore it on this PR, you can add the Note specifically for link checks, we only check the first 30 links in a file and we cache the results for several hours (for instance, if you just added a page, you might experience this). Our recommendation is to add |
@@ -64,10 +64,10 @@ To create a job, make a `POST` request to the Logpush jobs endpoint with the fol | |||
- **destination_conf** - A log destination consisting of an endpoint URL, channel id, insecure-skip-verify flag, source type, authorization header in the string format below. | |||
|
|||
- **\<SPLUNK_ENDPOINT_URL>**: The Splunk raw HTTP Event Collector URL with port. For example: `splunk.cf-analytics.com:8088/services/collector/raw`. | |||
- Cloudflare expects the HEC network port to be configured to `:443` or `:8088`. | |||
- Currently, HEC network port has to be configured to either `443` or `8088`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we can remove this line, as I believe any port is allowed now.
Summary
Do not differentiate between Splunk Cloudflare or Splunk Enterprise.
Documentation checklist