This is an automated email from the ASF dual-hosted git repository. dzamo pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/drill-site.git
commit 7408fc1ec041f359cd85269133f2b8ae46c317ef Author: James Turton <[email protected]> AuthorDate: Mon Nov 14 14:29:07 2022 +0200 Update Splunk docs for DRILL-8357. --- .../plugins/140-splunk-storage-plugin.md | 27 ++++++++++++++-------- 1 file changed, 17 insertions(+), 10 deletions(-) diff --git a/_docs/en/connect-a-data-source/plugins/140-splunk-storage-plugin.md b/_docs/en/connect-a-data-source/plugins/140-splunk-storage-plugin.md index 7eab87a0a..b1d1e003a 100644 --- a/_docs/en/connect-a-data-source/plugins/140-splunk-storage-plugin.md +++ b/_docs/en/connect-a-data-source/plugins/140-splunk-storage-plugin.md @@ -30,15 +30,21 @@ containing the following properties. ### Configuration Options -| Option | Default | Description | -| ------------ | ------- | ------------------------------------------------- | -| type | (none) | Set to "splunk" to use this plugin | -| username | null | Splunk username to be used by Drill | -| password | null | Splunk password to be used by Drill | -| hostname | null | Splunk host to be queried by Drill | -| port | null | TCP port over which Drill will connect to Splunk. | -| earliestTime | null | Global earliest record timestamp default | -| latestTime | null | Global latest record timestamp default | +| Option | Default | Description | Since | +| -------------------- | --------- | --------------------------------------------------------------- | ----- | +| type | (none) | Set to "splunk" to use this plugin | 1.19 | +| username | null | Splunk username to be used by Drill | 1.19 | +| password | null | Splunk password to be used by Drill | 1.19 | +| scheme | https | The scheme with which to access the Splunk host. | 2.0 | +| hostname | localhost | Splunk host to be queried by Drill | 1.19 | +| port | 8089 | TCP port over which Drill will connect to Splunk. | 1.19 | +| earliestTime | null | Global earliest record timestamp default | 1.19 | +| latestTime | null | Global latest record timestamp default | 1.19 | +| app | null | The application context of the service. | 2.0 | +| owner | null | The owner context of the service. | 2.0 | +| token | null | A Splunk authentication token to use for the session. | 2.0 | +| cookie | null | A valid login cookie. | 2.0 | +| validateCertificates | true | Whether the Splunk client will validates the server's SSL cert. | 2.0 | ## Understanding Splunk's Data Model @@ -69,6 +75,7 @@ apache drill> SHOW TABLES IN splunk; +--------------+----------------+ | splunk | summary | | splunk | splunklogger | +| splunk | _configtracker | | splunk | _thefishbucket | | splunk | _audit | | splunk | _internal | @@ -77,7 +84,7 @@ apache drill> SHOW TABLES IN splunk; | splunk | history | | splunk | _telemetry | +--------------+----------------+ -9 rows selected (0.304 seconds) +10 rows selected (0.304 seconds) ``` To query Splunk from Drill, use the following format:
