Skip to content

Commit

Permalink
Update to clarify HEC Ack
Browse files Browse the repository at this point in the history
* Include note to warn not to set HEC Ack when configuring the HEC token on the Splunk side.
  • Loading branch information
Mark Bonsack committed Feb 12, 2020
1 parent d3cc05c commit e53ed1a
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions docs/configuration.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,9 @@ and variables needed to properly configure SC4S for your environment.
| SPLUNK_HEC_URL | url | URL(s) of the Splunk endpoint, can be a single URL space seperated list |
| SPLUNK_HEC_TOKEN | string | Splunk HTTP Event Collector Token |

* NOTE: Do _not_ configure HEC Acknowledgement when deploying the HEC token on the Splunk side; the underlying syslog-ng http
destination does not support this feature. Moreover, HEC would significantly degrade performance for streaming data such as syslog.


## Splunk HEC Destination Configuration

Expand Down

0 comments on commit e53ed1a

Please sign in to comment.