You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pipeline/inputs/splunk.md
+2Lines changed: 2 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,6 +17,8 @@ This plugin uses the following configuration parameters:
17
17
|`splunk_token`| Specify a Splunk token for HTTP HEC authentication. If multiple tokens are specified (with commas and no spaces), usage will be divided across each of the tokens. |_none_|
18
18
|`store_token_in_metadata`| Store Splunk HEC tokens in the Fluent Bit metadata. If set to `false`, tokens will be stored as normal key-value pairs in the record data. |`true`|
19
19
|`splunk_token_key`| Use the specified key for storing the Splunk token for HTTP HEC. Use only when `store_token_in_metadata` is `false`. |`@splunk_token`|
20
+
|`add_remote_addr`| Inject the client remote address into the record. The value is extracted from the X-Forwarded-For header if present, otherwise from the connection address. |`false`|
21
+
|`remote_addr_key`| Set the record key used to store the remote address when `add_remote_addr` is enabled. |`remote_addr`|
20
22
|`Threaded`| Indicates whether to run this input in its own [thread](../../administration/multithreading.md#inputs). |`false`|
0 commit comments