Splunk® Data Stream Processor

Use the Data Stream Processor

Acrobat logo Download manual as PDF

This documentation does not apply to the most recent version of DSP. Click here for the latest version.
Acrobat logo Download topic as PDF

Sending data from DSP into other destinations

You can send data from the Splunk Data Stream Processor (DSP) into one of several external data destinations using connector-based functions. Supported data destinations are:

  • Amazon Kinesis
  • Amazon S3
  • SignalFx
  • Microsoft Azure Event Hubs
  • Apache or Confluent Kafka

Example Workflow: Send data from Splunk Firehose to a data destination

If you are receiving streaming data from Splunk Firehose, follow these steps to send data to a supported data destination.

  1. Create a connection to a data destination:
    1. Send data from Splunk DSP to Amazon Kinesis.
    2. Send data from Splunk DSP to Amazon S3.
    3. Send data from Splunk DSP to SignalFx.
    4. Send data from Splunk DSP to Azure Event Hubs Using SAS Key (Beta).
    5. Send data from Splunk DSP to Kafka using SSL.
    6. Send data from Splunk DSP to Kafka without authentication.
  2. From the Build Pipeline tab, select the Read from Splunk Firehose data source. The Splunk Firehose source function reads streaming data from the DSP Ingest, Collect, HEC, Syslog, and Forwarders services.
  3. Click + to add additional desired data transformations on your data pipeline.
  4. End your pipeline with the sink function that matches the destination connector you created in step 1.
  5. Click Start Preview to verify that your pipeline is sending data.
  6. Save and activate your pipeline.
Last modified on 01 September, 2020
Performance expectations for sending data from a data pipeline to Splunk Enterprise
Send data from Splunk DSP to Amazon Kinesis

This documentation applies to the following versions of Splunk® Data Stream Processor: 1.1.0

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters