Forwarding

• To create the log sink

  initz create sink --name=<sink-name> --type=<sink-type> --url=<sink-url> --token=<sink-token> -- index=<index-name> --mode=<prod/non-prod>
  Flags

  --name

  • Indicates the name of the workspace.
  • required
  • Shorthand : n

  --type

  • Type indicates the type of forwarding platfrom like : splunk.
  • required

  --url

  • required
  • url format : https://[hostname]:[port]/services/collector

  --token

  • required

  --index

  • The Splunk platform stores incoming data as events in the selected index.
  • Optional : false
  • Such as : main,summary etc.
  • required

  --mode

  • Indicates the runtype.
  • Possible values : prod/non-prod
  • Optional

• To update the log sink

  initz edit sink --name=<sink-name> --url=<sink-url> --token=<sink-token> --index=<index-name>
  Flags

  --name

  • Indicates the name of the workspace.
  • required
  • Shorthand : n

  --url

  • required
  • url format : https://[hostname]:[port]/services/collector

  --token

  • required

  --index

  • The Splunk platform stores incoming data as events in the selected index.
  • Optional : false
  • Such as : main,summary etc.
  • required

• To delete the log sink

  initz delete sink --name=<sink-name>

important

To learn the process of creating an account on Splunk and generating token ,refer