From 411c41d99117aabd514715a39016b64f261e4e93 Mon Sep 17 00:00:00 2001 From: Misty Stanley-Jones Date: Thu, 30 Mar 2017 15:24:01 -0700 Subject: [PATCH] Clarify splunk-url for Splunk Cloud hosted instances (#2567) --- engine/admin/logging/splunk.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/engine/admin/logging/splunk.md b/engine/admin/logging/splunk.md index b7a0653f30..3287f39328 100644 --- a/engine/admin/logging/splunk.md +++ b/engine/admin/logging/splunk.md @@ -30,7 +30,7 @@ logging driver options: | Option | Required | Description | |-----------------------------|----------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | `splunk-token` | required | Splunk HTTP Event Collector token. | -| `splunk-url` | required | Path to your Splunk Enterprise or Splunk Cloud instance (including port and scheme used by HTTP Event Collector) `https://your_splunk_instance:8088`. | +| `splunk-url` | required | Path to your Splunk Enterprise, self-service Splunk Cloud instance, or Splunk Cloud managed cluster (including port and scheme used by HTTP Event Collector) in one of the following formats: `https://your_splunk_instance:8088` or `https://input-prd-p-XXXXXXX.cloud.splunk.com:8088` or `https://http-inputs-XXXXXXXX.splunkcloud.com`. | | `splunk-source` | optional | Event source. | | `splunk-sourcetype` | optional | Event source type. | | `splunk-index` | optional | Event index. | @@ -70,6 +70,10 @@ $ docker run --log-driver=splunk \ {% endraw %} ``` +The `splunk-url` for Splunk instances hosted on Splunk Cloud is in a format +like `https://http-inputs-XXXXXXXX.splunkcloud.com` and does not include a +port specifier. + ### Message formats By default Logging Driver sends messages as `inline` format, where each message