[
https://issues.apache.org/jira/browse/NIFI-1420?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15170613#comment-15170613
]
ASF GitHub Bot commented on NIFI-1420:
--------------------------------------
Github user bbende commented on the pull request:
https://github.com/apache/nifi/pull/233#issuecomment-189659132
@trixpan You are right that ListenSplunkForwarder is essentially a
ListenTCP. I started out thinking we might be able to do acknowledgements, but
was unable to find any documentation on the acknowledgement protocol and what
the frames look like, so in its current state it is just a straight TCP
listener. If you know how the acknowledgements work, or know of a resource that
describes it, please let me know.
Part of the issue comes down to user perception... since we are creating a
splunk bundle and going to have PutSplunk and GetSplunk, a potential user might
see that and come to the conclusion that we don't have a Listener for Splunk,
since ListenTCP would be part of standard processors.
I think for the future we should definitely have a ListenTCP that is as
generic as possible and exposes options like you suggested about the line
delimiter, and other ones about how to identify messages based on patters or
length.
> Splunk Processors
> -----------------
>
> Key: NIFI-1420
> URL: https://issues.apache.org/jira/browse/NIFI-1420
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Reporter: Bryan Bende
> Assignee: Bryan Bende
> Priority: Minor
> Fix For: 0.6.0
>
>
> To continue improving NiFi's ability to collect logs, a good integration
> point would be to have a processor that could listen for data from a Splunk
> forwarder (https://docs.splunk.com/Splexicon:Universalforwarder). Being able
> to push log messages to Splunk would also be useful.
> Splunk provides an SDK that may be helpful:
> https://github.com/splunk/splunk-sdk-java
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
