splunk_hec exporter
2 complete collector configs on this site use the splunk_hec exporter. Each is a whole file, validated with otelcol-contrib v0.161.0.
- Send to Splunk over HECLogs and metrics into Splunk through the HTTP Event Collector, with index and sourcetype set and the token from the environment.Logs · Metrics
- Firewall syslog to a SIEM, with PII maskedFirewall and VPN syslog into the SIEM with user names pseudonymised and e-mail addresses masked - IPs kept for correlation.Logs