responses
With reference to the following guide for sending NXLog output to Splunk using HEC:
https://nxlog.co/documentation/nxlog-user-guide#splunk-hec-collection
The NXLog community edition om_http is missing the add_http_header() procedure:
https://nxlog.co/docs/nxlog-ce/nxlog-reference-manual.html#om_http
This means it is not possible to output nxlog-ce data to http where a header needs to be added to the http post, such as the Splunk HEC:
https://docs.splunk.com/Documentation/Splunk/7.0.3/Data/HECWalkthrough
Is this functionality deliberately missing from the community edition, or can it please be added?
Comments (4)
Hi tape,
Indeed, but the section of the user guide that discusses which modules are available in the community and free versions states that the om_http module is available in both.
https://nxlog.co/documentation/nxlog-user-guide#modules-om
I was interpretting to mean the full functionality of the module is available in both, as described later in the user manual:
https://nxlog.co/documentation/nxlog-user-guide#om_http
Regards,
Ben
Hi Ben,
Please refer to the NXLog Community Edition Reference manual with respect to the features available in the CE. The `om_http` module in the EE has been enhanced and some features may not be available in the `om_http` that comes with the CE.
Hello Ben,
sorry for the confusion, but the recent Enterprise Edition contains a more improved version of om_http module, you can ask for a trial version if the NXLog Enterprise Edition is suitable for you.
Regards,
Peter
Thanks for clarifying - this answers my question.
The following post indeed suggests this will likely be added to the community edition sometime in the future: https://nxlog.co/question/1618/omhttp-authentication