5
responses

With reference to the following guide for sending NXLog output to Splunk using HEC:
https://nxlog.co/documentation/nxlog-user-guide#splunk-hec-collection

The NXLog community edition om_http is missing the add_http_header() procedure:
https://nxlog.co/docs/nxlog-ce/nxlog-reference-manual.html#om_http

This means it is not possible to output nxlog-ce data to http where a header needs to be added to the http post, such as the Splunk HEC:
https://docs.splunk.com/Documentation/Splunk/7.0.3/Data/HECWalkthrough

Is this functionality deliberately missing from the community edition, or can it please be added?

AskedApril 8, 2018 - 4:57am

Answer (1)

Hello,

this user guide under the url: https://nxlog.co/documentation/nxlog-user-guide refers to the latest available version of nxlog enterprise edition. It contains modules and improvements compared to the Community Edition. You can read about this note at the beginning of the user guide: https://nxlog.co/documentation/nxlog-user-guide#about-this-guide

Comments (4)

  • b0ti's picture
    (NXLog)

    Hi Ben,

    Please refer to the NXLog Community Edition Reference manual with respect to the features available in the CE. The `om_http` module in the EE has been enhanced and some features may not be available in the `om_http` that comes with the CE.

  • tape's picture

    Hello Ben,

    sorry for the confusion, but the recent Enterprise Edition contains a more improved version of om_http module, you can ask for a trial version if the NXLog Enterprise Edition is suitable for you.

    Regards,
    Peter