org.apache.nifinifi-splunk-nar2.2.0org.apache.nifinifi-standard-shared-nar2.2.02.0.0rel/nifi-2.2.0main1org.apache.nifi.processors.splunk.GetSplunkPROCESSORRetrieves data from Splunk Enterprise.getsplunklogsSchemeSchemeThe scheme for connecting to Splunk.httpshttpshttpshttphttptruefalsefalseNONEfalsefalseHostnameHostnameThe ip address or hostname of the Splunk server.localhosttruefalsefalseNONEfalsefalsePortPortThe port of the Splunk server.8089truefalsefalseNONEfalsefalseConnection TimeoutConnection TimeoutMax wait time for connection to the Splunk server.5 secsfalsefalsefalseNONEfalsefalseRead TimeoutRead TimeoutMax wait time for response from the Splunk server.15 secsfalsefalsefalseNONEfalsefalseQueryQueryThe query to execute. Typically beginning with a <search> command followed by a search clause, such as <search source="tcp:7689"> to search for messages received on TCP port 7689.search * | head 100truefalsefalseNONEfalsefalseTime Field StrategyTime Field StrategyIndicates whether to search by the time attached to the event, or by the time the event was indexed in Splunk.Event TimeEvent TimeEvent TimeSearch based on the time of the event which may be different than when the event was indexed.Index TimeIndex TimeSearch based on the time the event was indexed in Splunk.truefalsefalseNONEfalsefalseTime Range StrategyTime Range StrategyIndicates how to apply time ranges to each execution of the query. Selecting a managed option allows the processor to apply a time range from the last execution time to the current execution time. When using <Managed from Beginning>, an earliest time will not be applied on the first execution, and thus all records searched. When using <Managed from Current> the earliest time of the first execution will be the initial execution time. When using <Provided>, the time range will come from the Earliest Time and Latest Time properties, or no time range will be applied if these properties are left blank.ProvidedManaged from BeginningManaged from BeginningThe processor will manage the date ranges of the query starting from the beginning of time.Managed from CurrentManaged from CurrentThe processor will manage the date ranges of the query starting from the current time.ProvidedProvidedThe the time range provided through the Earliest Time and Latest Time properties will be used.truefalsefalseNONEfalsefalseEarliest TimeEarliest TimeThe value to use for the earliest time when querying. Only used with a Time Range Strategy of Provided. See Splunk's documentation on Search Time Modifiers for guidance in populating this field.falsefalsefalseNONEfalsefalseLatest TimeLatest TimeThe value to use for the latest time when querying. Only used with a Time Range Strategy of Provided. See Splunk's documentation on Search Time Modifiers for guidance in populating this field.falsefalsefalseNONEfalsefalseTime ZoneTime ZoneThe Time Zone to use for formatting dates when performing a search. Only used with Managed time strategies.UTCAfrica/AbidjanAfrica/AbidjanAfrica/AccraAfrica/AccraAfrica/Addis_AbabaAfrica/Addis_AbabaAfrica/AlgiersAfrica/AlgiersAfrica/AsmaraAfrica/AsmaraAfrica/AsmeraAfrica/AsmeraAfrica/BamakoAfrica/BamakoAfrica/BanguiAfrica/BanguiAfrica/BanjulAfrica/BanjulAfrica/BissauAfrica/BissauAfrica/BlantyreAfrica/BlantyreAfrica/BrazzavilleAfrica/BrazzavilleAfrica/BujumburaAfrica/BujumburaAfrica/CairoAfrica/CairoAfrica/CasablancaAfrica/CasablancaAfrica/CeutaAfrica/CeutaAfrica/ConakryAfrica/ConakryAfrica/DakarAfrica/DakarAfrica/Dar_es_SalaamAfrica/Dar_es_SalaamAfrica/DjiboutiAfrica/DjiboutiAfrica/DoualaAfrica/DoualaAfrica/El_AaiunAfrica/El_AaiunAfrica/FreetownAfrica/FreetownAfrica/GaboroneAfrica/GaboroneAfrica/HarareAfrica/HarareAfrica/JohannesburgAfrica/JohannesburgAfrica/JubaAfrica/JubaAfrica/KampalaAfrica/KampalaAfrica/KhartoumAfrica/KhartoumAfrica/KigaliAfrica/KigaliAfrica/KinshasaAfrica/KinshasaAfrica/LagosAfrica/LagosAfrica/LibrevilleAfrica/LibrevilleAfrica/LomeAfrica/LomeAfrica/LuandaAfrica/LuandaAfrica/LubumbashiAfrica/LubumbashiAfrica/LusakaAfrica/LusakaAfrica/MalaboAfrica/MalaboAfrica/MaputoAfrica/MaputoAfrica/MaseruAfrica/MaseruAfrica/MbabaneAfrica/MbabaneAfrica/MogadishuAfrica/MogadishuAfrica/MonroviaAfrica/MonroviaAfrica/NairobiAfrica/NairobiAfrica/NdjamenaAfrica/NdjamenaAfrica/NiameyAfrica/NiameyAfrica/NouakchottAfrica/NouakchottAfrica/OuagadougouAfrica/OuagadougouAfrica/Porto-NovoAfrica/Porto-NovoAfrica/Sao_TomeAfrica/Sao_TomeAfrica/TimbuktuAfrica/TimbuktuAfrica/TripoliAfrica/TripoliAfrica/TunisAfrica/TunisAfrica/WindhoekAfrica/WindhoekAmerica/AdakAmerica/AdakAmerica/AnchorageAmerica/AnchorageAmerica/AnguillaAmerica/AnguillaAmerica/AntiguaAmerica/AntiguaAmerica/AraguainaAmerica/AraguainaAmerica/Argentina/Buenos_AiresAmerica/Argentina/Buenos_AiresAmerica/Argentina/CatamarcaAmerica/Argentina/CatamarcaAmerica/Argentina/ComodRivadaviaAmerica/Argentina/ComodRivadaviaAmerica/Argentina/CordobaAmerica/Argentina/CordobaAmerica/Argentina/JujuyAmerica/Argentina/JujuyAmerica/Argentina/La_RiojaAmerica/Argentina/La_RiojaAmerica/Argentina/MendozaAmerica/Argentina/MendozaAmerica/Argentina/Rio_GallegosAmerica/Argentina/Rio_GallegosAmerica/Argentina/SaltaAmerica/Argentina/SaltaAmerica/Argentina/San_JuanAmerica/Argentina/San_JuanAmerica/Argentina/San_LuisAmerica/Argentina/San_LuisAmerica/Argentina/TucumanAmerica/Argentina/TucumanAmerica/Argentina/UshuaiaAmerica/Argentina/UshuaiaAmerica/ArubaAmerica/ArubaAmerica/AsuncionAmerica/AsuncionAmerica/AtikokanAmerica/AtikokanAmerica/AtkaAmerica/AtkaAmerica/BahiaAmerica/BahiaAmerica/Bahia_BanderasAmerica/Bahia_BanderasAmerica/BarbadosAmerica/BarbadosAmerica/BelemAmerica/BelemAmerica/BelizeAmerica/BelizeAmerica/Blanc-SablonAmerica/Blanc-SablonAmerica/Boa_VistaAmerica/Boa_VistaAmerica/BogotaAmerica/BogotaAmerica/BoiseAmerica/BoiseAmerica/Buenos_AiresAmerica/Buenos_AiresAmerica/Cambridge_BayAmerica/Cambridge_BayAmerica/Campo_GrandeAmerica/Campo_GrandeAmerica/CancunAmerica/CancunAmerica/CaracasAmerica/CaracasAmerica/CatamarcaAmerica/CatamarcaAmerica/CayenneAmerica/CayenneAmerica/CaymanAmerica/CaymanAmerica/ChicagoAmerica/ChicagoAmerica/ChihuahuaAmerica/ChihuahuaAmerica/Ciudad_JuarezAmerica/Ciudad_JuarezAmerica/Coral_HarbourAmerica/Coral_HarbourAmerica/CordobaAmerica/CordobaAmerica/Costa_RicaAmerica/Costa_RicaAmerica/CrestonAmerica/CrestonAmerica/CuiabaAmerica/CuiabaAmerica/CuracaoAmerica/CuracaoAmerica/DanmarkshavnAmerica/DanmarkshavnAmerica/DawsonAmerica/DawsonAmerica/Dawson_CreekAmerica/Dawson_CreekAmerica/DenverAmerica/DenverAmerica/DetroitAmerica/DetroitAmerica/DominicaAmerica/DominicaAmerica/EdmontonAmerica/EdmontonAmerica/EirunepeAmerica/EirunepeAmerica/El_SalvadorAmerica/El_SalvadorAmerica/EnsenadaAmerica/EnsenadaAmerica/Fort_NelsonAmerica/Fort_NelsonAmerica/Fort_WayneAmerica/Fort_WayneAmerica/FortalezaAmerica/FortalezaAmerica/Glace_BayAmerica/Glace_BayAmerica/GodthabAmerica/GodthabAmerica/Goose_BayAmerica/Goose_BayAmerica/Grand_TurkAmerica/Grand_TurkAmerica/GrenadaAmerica/GrenadaAmerica/GuadeloupeAmerica/GuadeloupeAmerica/GuatemalaAmerica/GuatemalaAmerica/GuayaquilAmerica/GuayaquilAmerica/GuyanaAmerica/GuyanaAmerica/HalifaxAmerica/HalifaxAmerica/HavanaAmerica/HavanaAmerica/HermosilloAmerica/HermosilloAmerica/Indiana/IndianapolisAmerica/Indiana/IndianapolisAmerica/Indiana/KnoxAmerica/Indiana/KnoxAmerica/Indiana/MarengoAmerica/Indiana/MarengoAmerica/Indiana/PetersburgAmerica/Indiana/PetersburgAmerica/Indiana/Tell_CityAmerica/Indiana/Tell_CityAmerica/Indiana/VevayAmerica/Indiana/VevayAmerica/Indiana/VincennesAmerica/Indiana/VincennesAmerica/Indiana/WinamacAmerica/Indiana/WinamacAmerica/IndianapolisAmerica/IndianapolisAmerica/InuvikAmerica/InuvikAmerica/IqaluitAmerica/IqaluitAmerica/JamaicaAmerica/JamaicaAmerica/JujuyAmerica/JujuyAmerica/JuneauAmerica/JuneauAmerica/Kentucky/LouisvilleAmerica/Kentucky/LouisvilleAmerica/Kentucky/MonticelloAmerica/Kentucky/MonticelloAmerica/Knox_INAmerica/Knox_INAmerica/KralendijkAmerica/KralendijkAmerica/La_PazAmerica/La_PazAmerica/LimaAmerica/LimaAmerica/Los_AngelesAmerica/Los_AngelesAmerica/LouisvilleAmerica/LouisvilleAmerica/Lower_PrincesAmerica/Lower_PrincesAmerica/MaceioAmerica/MaceioAmerica/ManaguaAmerica/ManaguaAmerica/ManausAmerica/ManausAmerica/MarigotAmerica/MarigotAmerica/MartiniqueAmerica/MartiniqueAmerica/MatamorosAmerica/MatamorosAmerica/MazatlanAmerica/MazatlanAmerica/MendozaAmerica/MendozaAmerica/MenomineeAmerica/MenomineeAmerica/MeridaAmerica/MeridaAmerica/MetlakatlaAmerica/MetlakatlaAmerica/Mexico_CityAmerica/Mexico_CityAmerica/MiquelonAmerica/MiquelonAmerica/MonctonAmerica/MonctonAmerica/MonterreyAmerica/MonterreyAmerica/MontevideoAmerica/MontevideoAmerica/MontrealAmerica/MontrealAmerica/MontserratAmerica/MontserratAmerica/NassauAmerica/NassauAmerica/New_YorkAmerica/New_YorkAmerica/NipigonAmerica/NipigonAmerica/NomeAmerica/NomeAmerica/NoronhaAmerica/NoronhaAmerica/North_Dakota/BeulahAmerica/North_Dakota/BeulahAmerica/North_Dakota/CenterAmerica/North_Dakota/CenterAmerica/North_Dakota/New_SalemAmerica/North_Dakota/New_SalemAmerica/NuukAmerica/NuukAmerica/OjinagaAmerica/OjinagaAmerica/PanamaAmerica/PanamaAmerica/PangnirtungAmerica/PangnirtungAmerica/ParamariboAmerica/ParamariboAmerica/PhoenixAmerica/PhoenixAmerica/Port-au-PrinceAmerica/Port-au-PrinceAmerica/Port_of_SpainAmerica/Port_of_SpainAmerica/Porto_AcreAmerica/Porto_AcreAmerica/Porto_VelhoAmerica/Porto_VelhoAmerica/Puerto_RicoAmerica/Puerto_RicoAmerica/Punta_ArenasAmerica/Punta_ArenasAmerica/Rainy_RiverAmerica/Rainy_RiverAmerica/Rankin_InletAmerica/Rankin_InletAmerica/RecifeAmerica/RecifeAmerica/ReginaAmerica/ReginaAmerica/ResoluteAmerica/ResoluteAmerica/Rio_BrancoAmerica/Rio_BrancoAmerica/RosarioAmerica/RosarioAmerica/Santa_IsabelAmerica/Santa_IsabelAmerica/SantaremAmerica/SantaremAmerica/SantiagoAmerica/SantiagoAmerica/Santo_DomingoAmerica/Santo_DomingoAmerica/Sao_PauloAmerica/Sao_PauloAmerica/ScoresbysundAmerica/ScoresbysundAmerica/ShiprockAmerica/ShiprockAmerica/SitkaAmerica/SitkaAmerica/St_BarthelemyAmerica/St_BarthelemyAmerica/St_JohnsAmerica/St_JohnsAmerica/St_KittsAmerica/St_KittsAmerica/St_LuciaAmerica/St_LuciaAmerica/St_ThomasAmerica/St_ThomasAmerica/St_VincentAmerica/St_VincentAmerica/Swift_CurrentAmerica/Swift_CurrentAmerica/TegucigalpaAmerica/TegucigalpaAmerica/ThuleAmerica/ThuleAmerica/Thunder_BayAmerica/Thunder_BayAmerica/TijuanaAmerica/TijuanaAmerica/TorontoAmerica/TorontoAmerica/TortolaAmerica/TortolaAmerica/VancouverAmerica/VancouverAmerica/VirginAmerica/VirginAmerica/WhitehorseAmerica/WhitehorseAmerica/WinnipegAmerica/WinnipegAmerica/YakutatAmerica/YakutatAmerica/YellowknifeAmerica/YellowknifeAntarctica/CaseyAntarctica/CaseyAntarctica/DavisAntarctica/DavisAntarctica/DumontDUrvilleAntarctica/DumontDUrvilleAntarctica/MacquarieAntarctica/MacquarieAntarctica/MawsonAntarctica/MawsonAntarctica/McMurdoAntarctica/McMurdoAntarctica/PalmerAntarctica/PalmerAntarctica/RotheraAntarctica/RotheraAntarctica/South_PoleAntarctica/South_PoleAntarctica/SyowaAntarctica/SyowaAntarctica/TrollAntarctica/TrollAntarctica/VostokAntarctica/VostokArctic/LongyearbyenArctic/LongyearbyenAsia/AdenAsia/AdenAsia/AlmatyAsia/AlmatyAsia/AmmanAsia/AmmanAsia/AnadyrAsia/AnadyrAsia/AqtauAsia/AqtauAsia/AqtobeAsia/AqtobeAsia/AshgabatAsia/AshgabatAsia/AshkhabadAsia/AshkhabadAsia/AtyrauAsia/AtyrauAsia/BaghdadAsia/BaghdadAsia/BahrainAsia/BahrainAsia/BakuAsia/BakuAsia/BangkokAsia/BangkokAsia/BarnaulAsia/BarnaulAsia/BeirutAsia/BeirutAsia/BishkekAsia/BishkekAsia/BruneiAsia/BruneiAsia/CalcuttaAsia/CalcuttaAsia/ChitaAsia/ChitaAsia/ChoibalsanAsia/ChoibalsanAsia/ChongqingAsia/ChongqingAsia/ChungkingAsia/ChungkingAsia/ColomboAsia/ColomboAsia/DaccaAsia/DaccaAsia/DamascusAsia/DamascusAsia/DhakaAsia/DhakaAsia/DiliAsia/DiliAsia/DubaiAsia/DubaiAsia/DushanbeAsia/DushanbeAsia/FamagustaAsia/FamagustaAsia/GazaAsia/GazaAsia/HarbinAsia/HarbinAsia/HebronAsia/HebronAsia/Ho_Chi_MinhAsia/Ho_Chi_MinhAsia/Hong_KongAsia/Hong_KongAsia/HovdAsia/HovdAsia/IrkutskAsia/IrkutskAsia/IstanbulAsia/IstanbulAsia/JakartaAsia/JakartaAsia/JayapuraAsia/JayapuraAsia/JerusalemAsia/JerusalemAsia/KabulAsia/KabulAsia/KamchatkaAsia/KamchatkaAsia/KarachiAsia/KarachiAsia/KashgarAsia/KashgarAsia/KathmanduAsia/KathmanduAsia/KatmanduAsia/KatmanduAsia/KhandygaAsia/KhandygaAsia/KolkataAsia/KolkataAsia/KrasnoyarskAsia/KrasnoyarskAsia/Kuala_LumpurAsia/Kuala_LumpurAsia/KuchingAsia/KuchingAsia/KuwaitAsia/KuwaitAsia/MacaoAsia/MacaoAsia/MacauAsia/MacauAsia/MagadanAsia/MagadanAsia/MakassarAsia/MakassarAsia/ManilaAsia/ManilaAsia/MuscatAsia/MuscatAsia/NicosiaAsia/NicosiaAsia/NovokuznetskAsia/NovokuznetskAsia/NovosibirskAsia/NovosibirskAsia/OmskAsia/OmskAsia/OralAsia/OralAsia/Phnom_PenhAsia/Phnom_PenhAsia/PontianakAsia/PontianakAsia/PyongyangAsia/PyongyangAsia/QatarAsia/QatarAsia/QostanayAsia/QostanayAsia/QyzylordaAsia/QyzylordaAsia/RangoonAsia/RangoonAsia/RiyadhAsia/RiyadhAsia/SaigonAsia/SaigonAsia/SakhalinAsia/SakhalinAsia/SamarkandAsia/SamarkandAsia/SeoulAsia/SeoulAsia/ShanghaiAsia/ShanghaiAsia/SingaporeAsia/SingaporeAsia/SrednekolymskAsia/SrednekolymskAsia/TaipeiAsia/TaipeiAsia/TashkentAsia/TashkentAsia/TbilisiAsia/TbilisiAsia/TehranAsia/TehranAsia/Tel_AvivAsia/Tel_AvivAsia/ThimbuAsia/ThimbuAsia/ThimphuAsia/ThimphuAsia/TokyoAsia/TokyoAsia/TomskAsia/TomskAsia/Ujung_PandangAsia/Ujung_PandangAsia/UlaanbaatarAsia/UlaanbaatarAsia/Ulan_BatorAsia/Ulan_BatorAsia/UrumqiAsia/UrumqiAsia/Ust-NeraAsia/Ust-NeraAsia/VientianeAsia/VientianeAsia/VladivostokAsia/VladivostokAsia/YakutskAsia/YakutskAsia/YangonAsia/YangonAsia/YekaterinburgAsia/YekaterinburgAsia/YerevanAsia/YerevanAtlantic/AzoresAtlantic/AzoresAtlantic/BermudaAtlantic/BermudaAtlantic/CanaryAtlantic/CanaryAtlantic/Cape_VerdeAtlantic/Cape_VerdeAtlantic/FaeroeAtlantic/FaeroeAtlantic/FaroeAtlantic/FaroeAtlantic/Jan_MayenAtlantic/Jan_MayenAtlantic/MadeiraAtlantic/MadeiraAtlantic/ReykjavikAtlantic/ReykjavikAtlantic/South_GeorgiaAtlantic/South_GeorgiaAtlantic/St_HelenaAtlantic/St_HelenaAtlantic/StanleyAtlantic/StanleyAustralia/ACTAustralia/ACTAustralia/AdelaideAustralia/AdelaideAustralia/BrisbaneAustralia/BrisbaneAustralia/Broken_HillAustralia/Broken_HillAustralia/CanberraAustralia/CanberraAustralia/CurrieAustralia/CurrieAustralia/DarwinAustralia/DarwinAustralia/EuclaAustralia/EuclaAustralia/HobartAustralia/HobartAustralia/LHIAustralia/LHIAustralia/LindemanAustralia/LindemanAustralia/Lord_HoweAustralia/Lord_HoweAustralia/MelbourneAustralia/MelbourneAustralia/NSWAustralia/NSWAustralia/NorthAustralia/NorthAustralia/PerthAustralia/PerthAustralia/QueenslandAustralia/QueenslandAustralia/SouthAustralia/SouthAustralia/SydneyAustralia/SydneyAustralia/TasmaniaAustralia/TasmaniaAustralia/VictoriaAustralia/VictoriaAustralia/WestAustralia/WestAustralia/YancowinnaAustralia/YancowinnaBrazil/AcreBrazil/AcreBrazil/DeNoronhaBrazil/DeNoronhaBrazil/EastBrazil/EastBrazil/WestBrazil/WestCETCETCST6CDTCST6CDTCanada/AtlanticCanada/AtlanticCanada/CentralCanada/CentralCanada/EasternCanada/EasternCanada/MountainCanada/MountainCanada/NewfoundlandCanada/NewfoundlandCanada/PacificCanada/PacificCanada/SaskatchewanCanada/SaskatchewanCanada/YukonCanada/YukonChile/ContinentalChile/ContinentalChile/EasterIslandChile/EasterIslandCubaCubaEETEETEST5EDTEST5EDTEgyptEgyptEireEireEtc/GMTEtc/GMTEtc/GMT+0Etc/GMT+0Etc/GMT+1Etc/GMT+1Etc/GMT+10Etc/GMT+10Etc/GMT+11Etc/GMT+11Etc/GMT+12Etc/GMT+12Etc/GMT+2Etc/GMT+2Etc/GMT+3Etc/GMT+3Etc/GMT+4Etc/GMT+4Etc/GMT+5Etc/GMT+5Etc/GMT+6Etc/GMT+6Etc/GMT+7Etc/GMT+7Etc/GMT+8Etc/GMT+8Etc/GMT+9Etc/GMT+9Etc/GMT-0Etc/GMT-0Etc/GMT-1Etc/GMT-1Etc/GMT-10Etc/GMT-10Etc/GMT-11Etc/GMT-11Etc/GMT-12Etc/GMT-12Etc/GMT-13Etc/GMT-13Etc/GMT-14Etc/GMT-14Etc/GMT-2Etc/GMT-2Etc/GMT-3Etc/GMT-3Etc/GMT-4Etc/GMT-4Etc/GMT-5Etc/GMT-5Etc/GMT-6Etc/GMT-6Etc/GMT-7Etc/GMT-7Etc/GMT-8Etc/GMT-8Etc/GMT-9Etc/GMT-9Etc/GMT0Etc/GMT0Etc/GreenwichEtc/GreenwichEtc/UCTEtc/UCTEtc/UTCEtc/UTCEtc/UniversalEtc/UniversalEtc/ZuluEtc/ZuluEurope/AmsterdamEurope/AmsterdamEurope/AndorraEurope/AndorraEurope/AstrakhanEurope/AstrakhanEurope/AthensEurope/AthensEurope/BelfastEurope/BelfastEurope/BelgradeEurope/BelgradeEurope/BerlinEurope/BerlinEurope/BratislavaEurope/BratislavaEurope/BrusselsEurope/BrusselsEurope/BucharestEurope/BucharestEurope/BudapestEurope/BudapestEurope/BusingenEurope/BusingenEurope/ChisinauEurope/ChisinauEurope/CopenhagenEurope/CopenhagenEurope/DublinEurope/DublinEurope/GibraltarEurope/GibraltarEurope/GuernseyEurope/GuernseyEurope/HelsinkiEurope/HelsinkiEurope/Isle_of_ManEurope/Isle_of_ManEurope/IstanbulEurope/IstanbulEurope/JerseyEurope/JerseyEurope/KaliningradEurope/KaliningradEurope/KievEurope/KievEurope/KirovEurope/KirovEurope/KyivEurope/KyivEurope/LisbonEurope/LisbonEurope/LjubljanaEurope/LjubljanaEurope/LondonEurope/LondonEurope/LuxembourgEurope/LuxembourgEurope/MadridEurope/MadridEurope/MaltaEurope/MaltaEurope/MariehamnEurope/MariehamnEurope/MinskEurope/MinskEurope/MonacoEurope/MonacoEurope/MoscowEurope/MoscowEurope/NicosiaEurope/NicosiaEurope/OsloEurope/OsloEurope/ParisEurope/ParisEurope/PodgoricaEurope/PodgoricaEurope/PragueEurope/PragueEurope/RigaEurope/RigaEurope/RomeEurope/RomeEurope/SamaraEurope/SamaraEurope/San_MarinoEurope/San_MarinoEurope/SarajevoEurope/SarajevoEurope/SaratovEurope/SaratovEurope/SimferopolEurope/SimferopolEurope/SkopjeEurope/SkopjeEurope/SofiaEurope/SofiaEurope/StockholmEurope/StockholmEurope/TallinnEurope/TallinnEurope/TiraneEurope/TiraneEurope/TiraspolEurope/TiraspolEurope/UlyanovskEurope/UlyanovskEurope/UzhgorodEurope/UzhgorodEurope/VaduzEurope/VaduzEurope/VaticanEurope/VaticanEurope/ViennaEurope/ViennaEurope/VilniusEurope/VilniusEurope/VolgogradEurope/VolgogradEurope/WarsawEurope/WarsawEurope/ZagrebEurope/ZagrebEurope/ZaporozhyeEurope/ZaporozhyeEurope/ZurichEurope/ZurichGBGBGB-EireGB-EireGMTGMTGMT0GMT0GreenwichGreenwichHongkongHongkongIcelandIcelandIndian/AntananarivoIndian/AntananarivoIndian/ChagosIndian/ChagosIndian/ChristmasIndian/ChristmasIndian/CocosIndian/CocosIndian/ComoroIndian/ComoroIndian/KerguelenIndian/KerguelenIndian/MaheIndian/MaheIndian/MaldivesIndian/MaldivesIndian/MauritiusIndian/MauritiusIndian/MayotteIndian/MayotteIndian/ReunionIndian/ReunionIranIranIsraelIsraelJamaicaJamaicaJapanJapanKwajaleinKwajaleinLibyaLibyaMETMETMST7MDTMST7MDTMexico/BajaNorteMexico/BajaNorteMexico/BajaSurMexico/BajaSurMexico/GeneralMexico/GeneralNZNZNZ-CHATNZ-CHATNavajoNavajoPRCPRCPST8PDTPST8PDTPacific/ApiaPacific/ApiaPacific/AucklandPacific/AucklandPacific/BougainvillePacific/BougainvillePacific/ChathamPacific/ChathamPacific/ChuukPacific/ChuukPacific/EasterPacific/EasterPacific/EfatePacific/EfatePacific/EnderburyPacific/EnderburyPacific/FakaofoPacific/FakaofoPacific/FijiPacific/FijiPacific/FunafutiPacific/FunafutiPacific/GalapagosPacific/GalapagosPacific/GambierPacific/GambierPacific/GuadalcanalPacific/GuadalcanalPacific/GuamPacific/GuamPacific/HonoluluPacific/HonoluluPacific/JohnstonPacific/JohnstonPacific/KantonPacific/KantonPacific/KiritimatiPacific/KiritimatiPacific/KosraePacific/KosraePacific/KwajaleinPacific/KwajaleinPacific/MajuroPacific/MajuroPacific/MarquesasPacific/MarquesasPacific/MidwayPacific/MidwayPacific/NauruPacific/NauruPacific/NiuePacific/NiuePacific/NorfolkPacific/NorfolkPacific/NoumeaPacific/NoumeaPacific/Pago_PagoPacific/Pago_PagoPacific/PalauPacific/PalauPacific/PitcairnPacific/PitcairnPacific/PohnpeiPacific/PohnpeiPacific/PonapePacific/PonapePacific/Port_MoresbyPacific/Port_MoresbyPacific/RarotongaPacific/RarotongaPacific/SaipanPacific/SaipanPacific/SamoaPacific/SamoaPacific/TahitiPacific/TahitiPacific/TarawaPacific/TarawaPacific/TongatapuPacific/TongatapuPacific/TrukPacific/TrukPacific/WakePacific/WakePacific/WallisPacific/WallisPacific/YapPacific/YapPolandPolandPortugalPortugalROKROKSingaporeSingaporeSystemV/AST4SystemV/AST4SystemV/AST4ADTSystemV/AST4ADTSystemV/CST6SystemV/CST6SystemV/CST6CDTSystemV/CST6CDTSystemV/EST5SystemV/EST5SystemV/EST5EDTSystemV/EST5EDTSystemV/HST10SystemV/HST10SystemV/MST7SystemV/MST7SystemV/MST7MDTSystemV/MST7MDTSystemV/PST8SystemV/PST8SystemV/PST8PDTSystemV/PST8PDTSystemV/YST9SystemV/YST9SystemV/YST9YDTSystemV/YST9YDTTurkeyTurkeyUCTUCTUS/AlaskaUS/AlaskaUS/AleutianUS/AleutianUS/ArizonaUS/ArizonaUS/CentralUS/CentralUS/East-IndianaUS/East-IndianaUS/EasternUS/EasternUS/HawaiiUS/HawaiiUS/Indiana-StarkeUS/Indiana-StarkeUS/MichiganUS/MichiganUS/MountainUS/MountainUS/PacificUS/PacificUS/SamoaUS/SamoaUTCUTCUniversalUniversalW-SUW-SUWETWETZuluZuluESTESTHSTHSTMSTMSTACTACTAETAETAGTAGTARTARTASTASTBETBETBSTBSTCATCATCNTCNTCSTCSTCTTCTTEATEATECTECTIETIETISTISTJSTJSTMITMITNETNETNSTNSTPLTPLTPNTPNTPRTPRTPSTPSTSSTSSTVSTVSTtruefalsefalseNONEfalsefalseApplicationApplicationThe Splunk Application to query.falsefalsefalseNONEfalsefalseOwnerOwnerThe owner to pass to Splunk.falsefalsefalseNONEfalsefalseTokenTokenThe token to pass to Splunk.falsefalsefalseNONEfalsefalseUsernameUsernameThe username to authenticate to Splunk.falsefalsefalseNONEfalsefalsePasswordPasswordThe password to authenticate to Splunk.falsetruefalseNONEfalsefalseSecurity ProtocolSecurity ProtocolThe security protocol to use for communicating with Splunk.TLSv1_2TLSv1_2TLSv1_2TLSv1_1TLSv1_1TLSv1TLSv1SSLv3SSLv3falsefalsefalseNONEfalsefalseOutput ModeOutput ModeThe output mode for the results.JSONATOMATOMCSVCSVJSONJSONJSON_COLSJSON_COLSJSON_ROWSJSON_ROWSRAWRAWXMLXMLtruefalsefalseNONEfalsefalseSSL Context ServiceSSL Context ServiceThe SSL Context Service used to provide client certificate information for TLS/SSL connections.org.apache.nifi.ssl.SSLContextProviderorg.apache.nifinifi-standard-services-api-nar2.2.0falsefalsefalseNONEfalsefalsesuccessResults retrieved from Splunk are sent out this relationship.falsesplunk.queryThe query that performed to produce the FlowFile.splunk.earliest.timeThe value of the earliest time that was used when performing the query.splunk.latest.timeThe value of the latest time that was used when performing the query.trueIf using one of the managed Time Range Strategies, this processor will store the values of the latest and earliest times from the previous execution so that the next execution of the can pick up where the last execution left off. The state will be cleared and start over if the query is changed.CLUSTERINPUT_FORBIDDENTIMER_DRIVEN1 min1org.apache.nifi.processors.splunk.PutSplunkPROCESSORSends logs to Splunk Enterprise over TCP, TCP + TLS/SSL, or UDP. If a Message Delimiter is provided, then this processor will read messages from the incoming FlowFile based on the delimiter, and send each message to Splunk. If a Message Delimiter is not provided then the content of the FlowFile will be sent directly to Splunk as if it were a single message.splunklogstcpudpHostnameHostnameDestination hostname or IP addresslocalhosttruefalsetrueENVIRONMENTfalsefalsePortPortDestination port numbertruefalsetrueENVIRONMENTfalsefalseMax Size of Socket Send BufferMax Size of Socket Send BufferThe maximum size of the socket send buffer that should be used. This is a suggestion to the Operating System to indicate how big the socket buffer should be. If this value is set too low, the buffer may fill up before the data can be read, and incoming data will be dropped.1 MBtruefalsefalseNONEfalsefalseIdle Connection ExpirationIdle Connection ExpirationThe amount of time a connection should be held open without being used before closing the connection. A value of 0 seconds will disable this feature.15 secondstruefalsetrueENVIRONMENTfalsefalseTimeoutTimeoutThe timeout for connecting to and communicating with the destination. Does not apply to UDP10 secondsfalsefalsetrueENVIRONMENTfalsefalseTimeoutTimeoutThe timeout for connecting to and communicating with the destination. Does not apply to UDP10 secondsfalsefalsetrueENVIRONMENTfalsefalseCharacter SetCharacter SetSpecifies the character set of the data being sent.UTF-8truefalsetrueENVIRONMENTfalsefalseProtocolProtocolThe protocol for communication.TCPTCPTCPUDPUDPtruefalsefalseNONEfalsefalseMessage DelimiterMessage DelimiterSpecifies the delimiter to use for splitting apart multiple messages within a single FlowFile. If not specified, the entire content of the FlowFile will be used as a single message. If specified, the contents of the FlowFile will be split on this delimiter and each section sent as a separate message. Note that if messages are delimited and some messages for a given FlowFile are transferred successfully while others are not, the messages will be split into individual FlowFiles, such that those messages that were successfully sent are routed to the 'success' relationship while other messages are sent to the 'failure' relationship.falsefalsetrueFLOWFILE_ATTRIBUTESfalsefalseSSL Context ServiceSSL Context ServiceSpecifies the SSL Context Service to enable TLS socket communicationorg.apache.nifi.ssl.SSLContextProviderorg.apache.nifinifi-standard-services-api-nar2.2.0falsefalsefalseNONEfalsefalsesuccessFlowFiles that are sent successfully to the destination are sent out this relationship.falsefailureFlowFiles that failed to send to the destination are sent out this relationship.falsetrueINPUT_REQUIREDorg.apache.nifi.processors.splunk.PutSplunkHTTPPROCESSORSends flow file content to the specified Splunk server over HTTP or HTTPS. Supports HEC Index Acknowledgement.splunklogshttpSchemeSchemeThe scheme for connecting to Splunk.httpshttpshttpshttphttptruefalsefalseNONEfalsefalseHostnameHostnameThe ip address or hostname of the Splunk server.localhosttruefalsetrueENVIRONMENTfalsefalsePortHTTP Event Collector PortThe HTTP Event Collector HTTP Port Number.8088truefalsetrueENVIRONMENTfalsefalseSecurity ProtocolSecurity ProtocolThe security protocol to use for communicating with Splunk.TLSv1_2TLSv1_2TLSv1_2TLSv1_1TLSv1_1TLSv1TLSv1SSLv3SSLv3falsefalsefalseNONEfalsefalseOwnerOwnerThe owner to pass to Splunk.falsefalsetrueENVIRONMENTfalsefalseTokenHTTP Event Collector TokenHTTP Event Collector token starting with the string Splunk. For example 'Splunk 1234578-abcd-1234-abcd-1234abcd'falsefalsetrueENVIRONMENTfalsefalseUsernameUsernameThe username to authenticate to Splunk.falsefalsetrueENVIRONMENTfalsefalsePasswordPasswordThe password to authenticate to Splunk.falsetruefalseNONEfalsefalserequest-channelSplunk Request ChannelIdentifier of the used request channel.truefalsetrueENVIRONMENTfalsefalsesourceSourceUser-defined event source. Sets a default for all events when unspecified.falsefalsetrueFLOWFILE_ATTRIBUTESfalsefalsesource-typeSource TypeUser-defined event sourcetype. Sets a default for all events when unspecified.falsefalsetrueFLOWFILE_ATTRIBUTESfalsefalsehostHostSpecify with the host query string parameter. Sets a default for all events when unspecified.falsefalsetrueFLOWFILE_ATTRIBUTESfalsefalseindexIndexIndex name. Specify with the index query string parameter. Sets a default for all events when unspecified.falsefalsetrueFLOWFILE_ATTRIBUTESfalsefalsecontent-typeContent TypeThe media type of the event sent to Splunk. If not set, "mime.type" flow file attribute will be used. In case of neither of them is specified, this information will not be sent to the server.falsefalsetrueFLOWFILE_ATTRIBUTESfalsefalsecharacter-setCharacter SetThe name of the character set.UTF-8truefalsetrueFLOWFILE_ATTRIBUTESfalsefalsesuccessFlowFiles that are sent successfully to the destination are sent to this relationship.falsefailureFlowFiles that failed to send to the destination are sent to this relationship.falsemime.typeUses as value for HTTP Content-Type header if set.splunk.acknowledgement.idThe indexing acknowledgement id provided by Splunk.splunk.responded.atThe time of the response of put request for Splunk.INPUT_REQUIREDMEMORYAn instance of this component can cause high usage of this system resource. Multiple instances or high concurrency settings may result a degradation of performance.org.apache.nifi.processors.splunk.QuerySplunkIndexingStatusorg.apache.nifi.processors.splunk.QuerySplunkIndexingStatusPROCESSORQueries Splunk server in order to acquire the status of indexing acknowledgement.splunklogshttpacknowledgementSchemeSchemeThe scheme for connecting to Splunk.httpshttpshttpshttphttptruefalsefalseNONEfalsefalseHostnameHostnameThe ip address or hostname of the Splunk server.localhosttruefalsetrueENVIRONMENTfalsefalsePortHTTP Event Collector PortThe HTTP Event Collector HTTP Port Number.8088truefalsetrueENVIRONMENTfalsefalseSecurity ProtocolSecurity ProtocolThe security protocol to use for communicating with Splunk.TLSv1_2TLSv1_2TLSv1_2TLSv1_1TLSv1_1TLSv1TLSv1SSLv3SSLv3falsefalsefalseNONEfalsefalseOwnerOwnerThe owner to pass to Splunk.falsefalsetrueENVIRONMENTfalsefalseTokenHTTP Event Collector TokenHTTP Event Collector token starting with the string Splunk. For example 'Splunk 1234578-abcd-1234-abcd-1234abcd'falsefalsetrueENVIRONMENTfalsefalseUsernameUsernameThe username to authenticate to Splunk.falsefalsetrueENVIRONMENTfalsefalsePasswordPasswordThe password to authenticate to Splunk.falsetruefalseNONEfalsefalserequest-channelSplunk Request ChannelIdentifier of the used request channel.truefalsetrueENVIRONMENTfalsefalsettlMaximum Waiting TimeThe maximum time the processor tries to acquire acknowledgement confirmation for an index, from the point of registration. After the given amount of time, the processor considers the index as not acknowledged and transfers the FlowFile to the "unacknowledged" relationship.1 hourtruefalsefalseNONEfalsefalsemax-query-sizeMaximum Query SizeThe maximum number of acknowledgement identifiers the outgoing query contains in one batch. It is recommended not to set it too low in order to reduce network communication.10000truefalsefalseNONEfalsefalsefailureA FlowFile is transferred to this relationship when the acknowledgement was not successful due to errors during the communication. FlowFiles are timing out or unknown by the Splunk server will transferred to "undetermined" relationship.falsesuccessA FlowFile is transferred to this relationship when the acknowledgement was successful.falseundeterminedA FlowFile is transferred to this relationship when the acknowledgement state is not determined. FlowFiles transferred to this relationship might be penalized. This happens when Splunk returns with HTTP 200 but with false response for the acknowledgement id in the flow file attribute.falseunacknowledgedA FlowFile is transferred to this relationship when the acknowledgement was not successful. This can happen when the acknowledgement did not happened within the time period set for Maximum Waiting Time. FlowFiles with acknowledgement id unknown for the Splunk server will be transferred to this relationship after the Maximum Waiting Time is reached.falsesplunk.acknowledgement.idThe indexing acknowledgement id provided by Splunk.splunk.responded.atThe time of the response of put request for Splunk.INPUT_REQUIREDorg.apache.nifi.processors.splunk.PutSplunkHTTPTIMER_DRIVEN1 min1