SplunkDestinationDescription

The buffering options. If no value is specified, the default values for Splunk are used.

Type: SplunkBufferingHints object

Required: No

The Amazon CloudWatch logging options for your Firehose stream.

Type: CloudWatchLoggingOptions object

Required: No

The amount of time that Firehose waits to receive an acknowledgment from Splunk after it sends it data. At the end of the timeout period, Firehose either tries to send the data again or considers it an error, based on your retry settings.

Type: Integer

Valid Range: Minimum value of 180. Maximum value of 600.

Required: No

The HTTP Event Collector (HEC) endpoint to which Firehose sends your data.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 2048.

Pattern: .*

Required: No

This type can be either "Raw" or "Event."

Type: String

Valid Values: Raw | Event

Required: No

A GUID you obtain from your Splunk cluster when you create a new HEC endpoint.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 2048.

Pattern: .*

Required: No

The data processing configuration.

Type: ProcessingConfiguration object

Required: No

The retry behavior in case Firehose is unable to deliver data to Splunk or if it doesn't receive an acknowledgment of receipt from Splunk.

Type: SplunkRetryOptions object

Required: No

Defines how documents should be delivered to Amazon S3. When set to FailedDocumentsOnly, Firehose writes any data that could not be indexed to the configured Amazon S3 destination. When set to AllDocuments, Firehose delivers all incoming records to Amazon S3, and also writes failed documents to Amazon S3. Default value is FailedDocumentsOnly.

Type: String

Valid Values: FailedEventsOnly | AllEvents

Required: No

The Amazon S3 destination.>

Type: S3DestinationDescription object

Required: No

The configuration that defines how you access secrets for Splunk.

Type: SecretsManagerConfiguration object

Required: No