opnsense / opnsense/plugins

Create OPNsense plugin to export to Splunk using HTTP Event Collector

Open
#5,658 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

support
Dominant language
PHP
Stars
1.2k
Forks
863
Avg merge
2d 6h
Merged PRs (30d)
10

Description

Important notices
Before you add a new report, we ask you kindly to acknowledge the following:

Is your feature request related to a problem? Please describe.
Splunk is used by many. Syslog is good, but I think the HTTP event collector is a far easier method for shipping logs to Splunk. I have been using syslog and I have installed the Splunk forwarder on the firewall. The HEC exporter I developed seems to be more performant.

Describe the solution you'd like
I would like to see a plugin to support exporting logs over HTTP to a Splunk instance.

Describe alternatives you've considered
I have developed the plugin and I am interested in sharing it with the community.

Additional context

Image Image Image

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no files, tests, or entry points; start by reading CONTRIBUTING.md and examining existing OPNsense plugins that export logs. Determine how the proposed Splunk HTTP Event Collector plugin should be integrated and tested, with a working, maintainable log exporter and documented configuration as the completion criteria.

Written by the indexing model from the issue text.

Assessment

Domain
observability-sre
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.