Skip to content

Commit ec9e45f

Browse files
committed
in_splunk: Add remote_addr related parameters' descriptions
Signed-off-by: Hiroshi Hatake <hiroshi@chronosphere.io>
1 parent e4717b4 commit ec9e45f

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

pipeline/inputs/splunk.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,8 @@ This plugin uses the following configuration parameters:
1717
| `splunk_token` | Specify a Splunk token for HTTP HEC authentication. If multiple tokens are specified (with commas and no spaces), usage will be divided across each of the tokens. | _none_ |
1818
| `store_token_in_metadata` | Store Splunk HEC tokens in the Fluent Bit metadata. If set to `false`, tokens will be stored as normal key-value pairs in the record data. | `true` |
1919
| `splunk_token_key` | Use the specified key for storing the Splunk token for HTTP HEC. Use only when `store_token_in_metadata` is `false`. | `@splunk_token` |
20+
| `add_remote_addr` | Inject the client remote address into the record. The value is extracted from the X-Forwarded-For header if present, otherwise from the connection address. | `false` |
21+
| `remote_addr_key` | Set the record key used to store the remote address when `add_remote_addr` is enabled. | `remote_addr` |
2022
| `Threaded` | Indicates whether to run this input in its own [thread](../../administration/multithreading.md#inputs). | `false` |
2123

2224
## Get started

0 commit comments

Comments
 (0)