Add HTTP timeout to Splunk logging
Open
Nobody has claimed this yet.
area/logging
- Dominant language
- Go
- Stars
- 72.1k
- Forks
- 19.2k
- Avg merge
- 1d 18h
- Merged PRs (30d)
- 164
Description
Description
The current Splunk logging does not set a HTTP timeout for sending logs to the server over HEC.
A HTTP timeout would ensure the connection is not left stuck and delayed delivering messages.
This issue was reported here first: https://stackoverflow.com/questions/51215668/docker-splunk-logging-driver-logs-to-splunk-are-sometimes-delayed
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the Splunk logging driver and the code path that sends logs to Splunk over HEC. Confirm how the HTTP request is configured and define done as ensuring log delivery uses an HTTP timeout so a stuck connection cannot delay messages indefinitely.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, go
- Domain
- devops, observability
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100