Skip to content

Commit 96c817a

Browse files
committed
in_splunk: Add remote_addr related parameters' descriptions
Signed-off-by: Hiroshi Hatake <hiroshi@chronosphere.io>
1 parent 4f7355c commit 96c817a

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

pipeline/inputs/splunk.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,11 +8,13 @@ This plugin uses the following configuration parameters:
88

99
| Key | Description | Default |
1010
|---------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------|
11+
| `add_remote_addr` | Inject the client remote address into the record. The value is extracted from the X-Forwarded-For header if present, otherwise from the connection address. | `false` |
1112
| `buffer_chunk_size` | Set the chunk size for incoming JSON messages. These chunks are then stored and managed in the space available by `buffer_max_size`. | `512K` |
1213
| `buffer_max_size` | Set the maximum buffer size to receive a JSON message. | `4M` |
1314
| `http2` | Enable HTTP/2 support. | `true` |
1415
| `listen` | The address to listen on. | `0.0.0.0` |
1516
| `port` | The port for Fluent Bit to listen on. | `8088` |
17+
| `remote_addr_key` | Set the record key used to store the remote address when `add_remote_addr` is enabled. | `remote_addr` |
1618
| `splunk_token` | Specify a Splunk token for HTTP HEC authentication. If multiple tokens are specified (with commas and no spaces), usage will be divided across each of the tokens. | _none_ |
1719
| `splunk_token_key` | Set a record key for storing the Splunk token for HTTP HEC. Use only when `store_token_in_metadata` is `false`. | `@splunk_token` |
1820
| `store_token_in_metadata` | Store Splunk HEC tokens in the Fluent Bit metadata. If set to `false`, they will be stored as key-value pairs in the record data. | `true` |

0 commit comments

Comments
 (0)