Event destination type · v1.0.0
Splunk HTTP Event Collector (event destination type)
Sends events to a Splunk HTTP Event Collector (HEC) as JSON events. Each is Keystone's own event, unmapped, under sourcetype keystone:event by default.
Use cases
- Keystone forwards an organization's events in its own shape; mapping them to a schema, searching and correlating them is the destination's work.
- Set it up under Events → Destinations → New destination, for the organization whose events should go.
Splunk HTTP Event Collectorevent destination typeevent export