You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: Controls how the Splunk HEC token is supplied. Use `custom` to provide a token with `token_key`, or `from_source` to forward the token received from an upstream Splunk HEC source.
47139
+
enum:
47140
+
- custom
47141
+
- from_source
47142
+
example: custom
47143
+
type: string
47144
+
x-enum-varnames:
47145
+
- CUSTOM
47146
+
- FROM_SOURCE
47093
47147
ObservabilityPipelineSplunkHecDestinationType:
47094
47148
default: splunk_hec
47095
47149
description: The destination type. Always `splunk_hec`.
@@ -47113,6 +47167,12 @@ components:
47113
47167
description: The unique identifier for this component. Used in other parts of the pipeline to reference this component (for example, as the `input` to downstream components).
47114
47168
example: splunk-hec-source
47115
47169
type: string
47170
+
store_hec_token:
47171
+
description: |-
47172
+
When `true`, the Splunk HEC token from the incoming request is stored in the event metadata.
47173
+
This allows downstream components to forward the token to other Splunk HEC destinations.
"_recordingName": "Observability Pipelines/Validate an observability pipeline with enrichment table secret field lookup returns \"OK\" response",
4
+
"creator": {
5
+
"comment": "persister:fs",
6
+
"name": "Polly.JS",
7
+
"version": "6.0.5"
8
+
},
9
+
"entries": [
10
+
{
11
+
"_id": "862a8010da15d364489e4b7b8dc6e8ba",
12
+
"_order": 0,
13
+
"cache": {},
14
+
"request": {
15
+
"bodySize": 783,
16
+
"cookies": [],
17
+
"headers": [
18
+
{
19
+
"_fromType": "array",
20
+
"name": "accept",
21
+
"value": "application/json"
22
+
},
23
+
{
24
+
"_fromType": "array",
25
+
"name": "content-type",
26
+
"value": "application/json"
27
+
}
28
+
],
29
+
"headersSize": 583,
30
+
"httpVersion": "HTTP/1.1",
31
+
"method": "POST",
32
+
"postData": {
33
+
"mimeType": "application/json",
34
+
"params": [],
35
+
"text": "{\"data\":{\"attributes\":{\"config\":{\"destinations\":[{\"id\":\"datadog-logs-destination\",\"inputs\":[\"my-processor-group\"],\"type\":\"datadog_logs\"}],\"processor_groups\":[{\"enabled\":true,\"id\":\"my-processor-group\",\"include\":\"service:my-service\",\"inputs\":[\"datadog-agent-source\"],\"processors\":[{\"enabled\":true,\"file\":{\"encoding\":{\"delimiter\":\",\",\"includes_headers\":true,\"type\":\"csv\"},\"key\":[{\"column\":\"user_id\",\"comparison\":\"equals\",\"field\":{\"secret\":\"LOOKUP_KEY_SECRET\"}}],\"path\":\"/etc/enrichment/lookup.csv\",\"schema\":[{\"column\":\"user_id\",\"type\":\"string\"}]},\"id\":\"enrichment-processor\",\"include\":\"*\",\"target\":\"enriched\",\"type\":\"enrichment_table\"}]}],\"sources\":[{\"id\":\"datadog-agent-source\",\"type\":\"datadog_agent\"}]},\"name\":\"Pipeline with Enrichment Table Secret Field Lookup\"},\"type\":\"pipelines\"}}"
0 commit comments