Create a pass-through pipeline to send events
To start sending all your event data to a Splunk index in the configured Splunk Enterprise instance, create a pipeline using the Splunk Firehose to Splunk Index template:
- From the Build Pipeline page, click the Splunk Firehose to Splunk Index template.
- Click Validate to validate your pipeline. This template sends your data pipeline events or metrics to the main index in the default, pre-configured Splunk Enterprise instance associated with the Data Stream Processor.
- Click Preview to start a preview session on your pipeline, allowing sample data to run through your data pipeline.
- Give your pipeline a name and a description by clicking the More options menu, and then select Update Pipeline Metadata.
- After naming your pipeline, click Update.
- Click Save to save your pipeline.
- Click Activate to activate your pipeline.
- Click the Data Management tab to return to the Pipelines Management page.
This documentation applies to the following versions of Splunk® Data Stream Processor: 1.1.0
Feedback submitted, thanks!