{"componentChunkName":"component---src-templates-doc-tsx","path":"/product/integrations/splunk/","result":{"data":{"file":{"id":"1b63c37b-1cfc-5f42-be26-ecbcfb05b015","relativePath":"product/integrations/splunk/index.mdx","sourceInstanceName":"docs","childMarkdownRemark":null,"childMdx":{"body":"function _extends() { _extends = Object.assign || function (target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i]; for (var key in source) { if (Object.prototype.hasOwnProperty.call(source, key)) { target[key] = source[key]; } } } return target; }; return _extends.apply(this, arguments); }\n\nfunction _objectWithoutProperties(source, excluded) { if (source == null) return {}; var target = _objectWithoutPropertiesLoose(source, excluded); var key, i; if (Object.getOwnPropertySymbols) { var sourceSymbolKeys = Object.getOwnPropertySymbols(source); for (i = 0; i < sourceSymbolKeys.length; i++) { key = sourceSymbolKeys[i]; if (excluded.indexOf(key) >= 0) continue; if (!Object.prototype.propertyIsEnumerable.call(source, key)) continue; target[key] = source[key]; } } return target; }\n\nfunction _objectWithoutPropertiesLoose(source, excluded) { if (source == null) return {}; var target = {}; var sourceKeys = Object.keys(source); var key, i; for (i = 0; i < sourceKeys.length; i++) { key = sourceKeys[i]; if (excluded.indexOf(key) >= 0) continue; target[key] = source[key]; } return target; }\n\n/* @jsx mdx */\nvar _frontmatter = {\n  \"title\": \"Splunk\",\n  \"sidebar_order\": 1,\n  \"redirect_from\": [\"/workflow/integrations/splunk/\", \"/workflow/integrations/legacy-integrations/splunk/\"]\n};\n\nvar makeShortcode = function makeShortcode(name) {\n  return function MDXDefaultShortcode(props) {\n    console.warn(\"Component \" + name + \" was not imported, exported, or provided by MDXProvider as global scope\");\n    return mdx(\"div\", props);\n  };\n};\n\nvar Note = makeShortcode(\"Note\");\nvar CodeTabs = makeShortcode(\"CodeTabs\");\nvar CodeBlock = makeShortcode(\"CodeBlock\");\nvar layoutProps = {\n  _frontmatter: _frontmatter\n};\nvar MDXLayout = \"wrapper\";\nreturn function MDXContent(_ref) {\n  var components = _ref.components,\n      props = _objectWithoutProperties(_ref, [\"components\"]);\n\n  return mdx(MDXLayout, _extends({}, layoutProps, props, {\n    components: components,\n    mdxType: \"MDXLayout\"\n  }), mdx(\"p\", null, \"Connect Splunk to Sentry with the \", mdx(\"a\", _extends({\n    parentName: \"p\"\n  }, {\n    \"href\": \"/platform-redirect/?next=/data-management/data-forwarding/\"\n  }), \"Data Forwarding\"), \" feature.\"), mdx(Note, {\n    mdxType: \"Note\"\n  }, mdx(\"markdown\", null, mdx(\"p\", null, \"We only support Splunk Cloud plans. We do not support Splunk Enterprise plans. See the \", mdx(\"a\", _extends({\n    parentName: \"p\"\n  }, {\n    \"href\": \"https://dev.splunk.com/view/event-collector/SP-CAAAE7F\"\n  }), \"Splunk documentation\"), \" for specific details on your Splunk installation.\"))), mdx(\"p\", null, \"This integration needs to be set up in each project for which you wish to use it. It is maintained and supported by the \", mdx(\"a\", _extends({\n    parentName: \"p\"\n  }, {\n    \"href\": \"https://forum.sentry.io/\"\n  }), \"Sentry community\"), \".\"), mdx(\"h2\", {\n    \"id\": \"install-and-configure\",\n    \"style\": {\n      \"position\": \"relative\"\n    }\n  }, mdx(\"a\", _extends({\n    parentName: \"h2\"\n  }, {\n    \"href\": \"#install-and-configure\",\n    \"aria-label\": \"install and configure permalink\",\n    \"className\": \"anchor before\"\n  }), mdx(\"svg\", _extends({\n    parentName: \"a\"\n  }, {\n    \"viewBox\": \"0 0 24 24\",\n    \"xmlns\": \"http://www.w3.org/2000/svg\"\n  }), mdx(\"path\", _extends({\n    parentName: \"svg\"\n  }, {\n    \"d\": \"M10.879 6.05L15 1.93A5.001 5.001 0 0 1 22.071 9l-4.121 4.121a1 1 0 0 1-1.414-1.414l4.12-4.121a3 3 0 1 0-4.242-4.243l-4.121 4.121a1 1 0 1 1-1.414-1.414zm2.242 11.9L9 22.07A5 5 0 1 1 1.929 15l4.121-4.121a1 1 0 0 1 1.414 1.414l-4.12 4.121a3 3 0 1 0 4.242 4.243l4.121-4.121a1 1 0 1 1 1.414 1.414zm-8.364-.122l13.071-13.07a1 1 0 0 1 1.415 1.414L6.172 19.242a1 1 0 1 1-1.415-1.414z\",\n    \"fill\": \"currentColor\"\n  })))), \"Install and Configure\"), mdx(Note, {\n    mdxType: \"Note\"\n  }, mdx(\"markdown\", null, mdx(\"p\", null, \"Sentry owner or manager permissions permissions are required to install this integration.\"))), mdx(\"p\", null, \"Navigate to \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"Settings > Integrations > Splunk\")), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"1200px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/6a1470036f66ac902e33705e1eef2a82/aa440/splunk.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"38.99999999999999%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAICAIAAAB2/0i6AAAACXBIWXMAAAsSAAALEgHS3X78AAABHUlEQVQY021Qi2rDMAz0/9Nf6WBsUDYKY38xOkabNk3ipPVDfjt2MjVd9j4Lc9g66SSyWCyK3WHz8ioFKNAAOsbY/wG+jWMutuJuuX24L1a3u7cNIzfLJQi9L44gVUrpX+UsTuUe1qv987p8ejxgIaKU884bY7XS2NxZ16ffyjQBSc55nDEMiVTl2aJSGwCFZOpyCcxN/UWB5QSX01cMIQb/EQjS0pbStmloXVPOuHP+2skFr70JfcC6TU2FEDmnTwvXUUh1bOqKloeKNi1tOrwx22hrgmMOTHQg4cSAg2fSnoSV2s/ySKQEDKWUVgYJQnCBPoc8jHiGkZ3ZseGdcEpfvIavjUaSZ6Cf/A3T4Dh64pzTTnbcauvTj13Gd8wkx5gjmpo3AAAAAElFTkSuQmCC')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk\",\n    \"title\": \"splunk\",\n    \"src\": \"/static/6a1470036f66ac902e33705e1eef2a82/c1b63/splunk.png\",\n    \"srcSet\": [\"/static/6a1470036f66ac902e33705e1eef2a82/5a46d/splunk.png 300w\", \"/static/6a1470036f66ac902e33705e1eef2a82/0a47e/splunk.png 600w\", \"/static/6a1470036f66ac902e33705e1eef2a82/c1b63/splunk.png 1200w\", \"/static/6a1470036f66ac902e33705e1eef2a82/aa440/splunk.png 1500w\"],\n    \"sizes\": \"(max-width: 1200px) 100vw, 1200px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"h3\", {\n    \"id\": \"enabling-hec\",\n    \"style\": {\n      \"position\": \"relative\"\n    }\n  }, mdx(\"a\", _extends({\n    parentName: \"h3\"\n  }, {\n    \"href\": \"#enabling-hec\",\n    \"aria-label\": \"enabling hec permalink\",\n    \"className\": \"anchor before\"\n  }), mdx(\"svg\", _extends({\n    parentName: \"a\"\n  }, {\n    \"viewBox\": \"0 0 24 24\",\n    \"xmlns\": \"http://www.w3.org/2000/svg\"\n  }), mdx(\"path\", _extends({\n    parentName: \"svg\"\n  }, {\n    \"d\": \"M10.879 6.05L15 1.93A5.001 5.001 0 0 1 22.071 9l-4.121 4.121a1 1 0 0 1-1.414-1.414l4.12-4.121a3 3 0 1 0-4.242-4.243l-4.121 4.121a1 1 0 1 1-1.414-1.414zm2.242 11.9L9 22.07A5 5 0 1 1 1.929 15l4.121-4.121a1 1 0 0 1 1.414 1.414l-4.12 4.121a3 3 0 1 0 4.242 4.243l4.121-4.121a1 1 0 1 1 1.414 1.414zm-8.364-.122l13.071-13.07a1 1 0 0 1 1.415 1.414L6.172 19.242a1 1 0 1 1-1.415-1.414z\",\n    \"fill\": \"currentColor\"\n  })))), \"Enabling HEC\"), mdx(\"p\", null, \"To get started, you\\u2019ll need to first enable the HTTP Event Collector:\"), mdx(\"p\", null, \"Under \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"Settings\"), \", select \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"Data Inputs\"), \":\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"665px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/a9b984d7f7b34839ee6db8996b4f16a6/5f4af/splunk-settings.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"65.33333333333333%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk settings\",\n    \"title\": \"splunk settings\",\n    \"src\": \"/static/a9b984d7f7b34839ee6db8996b4f16a6/5f4af/splunk-settings.png\",\n    \"srcSet\": [\"/static/a9b984d7f7b34839ee6db8996b4f16a6/5a46d/splunk-settings.png 300w\", \"/static/a9b984d7f7b34839ee6db8996b4f16a6/0a47e/splunk-settings.png 600w\", \"/static/a9b984d7f7b34839ee6db8996b4f16a6/5f4af/splunk-settings.png 665w\"],\n    \"sizes\": \"(max-width: 665px) 100vw, 665px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"p\", null, \"Select \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"HTTP Event Collector\"), \" under Local Inputs:\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"1200px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/9cf40d3b851b635c7969855fe9f08006/081d5/splunk-data-inputs.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"37.99999999999999%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAICAIAAAB2/0i6AAAACXBIWXMAAAsSAAALEgHS3X78AAAA2UlEQVQY052P3YqDMBCF8/4v0CyiKHojPtPCUlZa2ipJNGmTmLEnhrb0Ypdlv4vJmcn8Mr7jeZ5XVVWWZVEUTdN0Xde2LYKc848XUSOCnLqusyyDZdNVrP+FncdBCDUDPSe0TmqKbC+MkEpORt+cMcY5t2ywz/6iJh3CEogeHaGS84ysSA0hQGhjrfMUIuz7MPTHYRyF954oBZN9I35RxHnMSZLYSR6kVnBX+o00GQIzwrN4fzxLNa/bzJ8qsa21FmUQM/Z2fruN2Fd/GUZhzDX8jZtDkyWdcgfhTcBmNRXQJwAAAABJRU5ErkJggg==')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk data inputs\",\n    \"title\": \"splunk data inputs\",\n    \"src\": \"/static/9cf40d3b851b635c7969855fe9f08006/c1b63/splunk-data-inputs.png\",\n    \"srcSet\": [\"/static/9cf40d3b851b635c7969855fe9f08006/5a46d/splunk-data-inputs.png 300w\", \"/static/9cf40d3b851b635c7969855fe9f08006/0a47e/splunk-data-inputs.png 600w\", \"/static/9cf40d3b851b635c7969855fe9f08006/c1b63/splunk-data-inputs.png 1200w\", \"/static/9cf40d3b851b635c7969855fe9f08006/081d5/splunk-data-inputs.png 1264w\"],\n    \"sizes\": \"(max-width: 1200px) 100vw, 1200px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"p\", null, \"Under your HEC settings, click \\\"Global Settings\\\":\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"1200px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/526fd2ad5d1c44343969ff8ee078b671/a3a5c/splunk-hec-inputs.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"21.333333333333336%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAECAIAAAABPYjBAAAACXBIWXMAAAsSAAALEgHS3X78AAAAr0lEQVQI11WMPwvCQAzF78M6OuooODk41bocbdVCqXTpV9LF9v7ntKeI18XcFQR/gZe88BJS1+csy9J0Tymtqqosy6Zp2rZFLf7Ji/x4OCV0u9rNF5vZOlkSYx9g7wDWuaf3fox8IpP1P8ZQr7cDJ/QgzKBI19201saYngspFQCgtdbiRkrJOUdVESFEaFIbDRjkwpDueul7hlHco+IlYwwiaPEYdZrxS3itNCZtAL6hhsu9bdFbQwAAAABJRU5ErkJggg==')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk hec inputs\",\n    \"title\": \"splunk hec inputs\",\n    \"src\": \"/static/526fd2ad5d1c44343969ff8ee078b671/c1b63/splunk-hec-inputs.png\",\n    \"srcSet\": [\"/static/526fd2ad5d1c44343969ff8ee078b671/5a46d/splunk-hec-inputs.png 300w\", \"/static/526fd2ad5d1c44343969ff8ee078b671/0a47e/splunk-hec-inputs.png 600w\", \"/static/526fd2ad5d1c44343969ff8ee078b671/c1b63/splunk-hec-inputs.png 1200w\", \"/static/526fd2ad5d1c44343969ff8ee078b671/a3a5c/splunk-hec-inputs.png 1277w\"],\n    \"sizes\": \"(max-width: 1200px) 100vw, 1200px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"p\", null, \"Change \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"All Tokens\"), \" to \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"Enabled\"), \", and note the HTTP Port Number (\", mdx(\"inlineCode\", {\n    parentName: \"p\"\n  }, \"8088\"), \" by default):\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"817px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/4f452c03638e968d6ac62e912521ef5d/98314/splunk-hec-global-settings.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"60.333333333333336%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAMCAIAAADtbgqsAAAACXBIWXMAAAsSAAALEgHS3X78AAABG0lEQVQoz6WSzU6EMBSFef8nMHHrxrV7lyyYGTBx3CDChIBAJQxMf2mp9QIjqROik/gFyEnpaXt6r+O6bhA8bTbb3XYXhmEcx1H0Bs9MtCgLGDwcEs/znCzLhOgJIYyyYVBa688JrQdL68FCKWWMSdPUqarKTHAuKGO90sfu1LSdUEMv5XFCyh6WMN/MOs/zs7nrurZtyXgA3p4Iquv3oiqKoq4/YBxjvG4uyxKUEKJpGkopZ4wSQgmtygIhREcIvOtmhMadIQnBmHMupZyDSTWy5DQWl8eGnRlnEBITzBiDVcQEnwDxW2b735/8ywyVgy/U+HxhS0mv5MdtX2+GmdBUNc33r4Hj+36SJKttuAq08P755f7x9u7h5gsSFqzQnOuaTQAAAABJRU5ErkJggg==')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk hec global settings\",\n    \"title\": \"splunk hec global settings\",\n    \"src\": \"/static/4f452c03638e968d6ac62e912521ef5d/98314/splunk-hec-global-settings.png\",\n    \"srcSet\": [\"/static/4f452c03638e968d6ac62e912521ef5d/5a46d/splunk-hec-global-settings.png 300w\", \"/static/4f452c03638e968d6ac62e912521ef5d/0a47e/splunk-hec-global-settings.png 600w\", \"/static/4f452c03638e968d6ac62e912521ef5d/98314/splunk-hec-global-settings.png 817w\"],\n    \"sizes\": \"(max-width: 817px) 100vw, 817px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(Note, {\n    mdxType: \"Note\"\n  }, mdx(\"markdown\", null, mdx(\"p\", null, \"If you\\u2019re running Splunk in a privileged environment, you may need to expose the HEC port.\"))), mdx(\"h3\", {\n    \"id\": \"creating-a-sentry-input\",\n    \"style\": {\n      \"position\": \"relative\"\n    }\n  }, mdx(\"a\", _extends({\n    parentName: \"h3\"\n  }, {\n    \"href\": \"#creating-a-sentry-input\",\n    \"aria-label\": \"creating a sentry input permalink\",\n    \"className\": \"anchor before\"\n  }), mdx(\"svg\", _extends({\n    parentName: \"a\"\n  }, {\n    \"viewBox\": \"0 0 24 24\",\n    \"xmlns\": \"http://www.w3.org/2000/svg\"\n  }), mdx(\"path\", _extends({\n    parentName: \"svg\"\n  }, {\n    \"d\": \"M10.879 6.05L15 1.93A5.001 5.001 0 0 1 22.071 9l-4.121 4.121a1 1 0 0 1-1.414-1.414l4.12-4.121a3 3 0 1 0-4.242-4.243l-4.121 4.121a1 1 0 1 1-1.414-1.414zm2.242 11.9L9 22.07A5 5 0 1 1 1.929 15l4.121-4.121a1 1 0 0 1 1.414 1.414l-4.12 4.121a3 3 0 1 0 4.242 4.243l4.121-4.121a1 1 0 1 1 1.414 1.414zm-8.364-.122l13.071-13.07a1 1 0 0 1 1.415 1.414L6.172 19.242a1 1 0 1 1-1.415-1.414z\",\n    \"fill\": \"currentColor\"\n  })))), \"Creating a Sentry Input\"), mdx(\"p\", null, \"Under HTTP Event Collector, create a new Sentry input by clicking \\\"New Token\\\":\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"1200px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/2991c7f7df940adcf56a0e7317dc6088/9cea8/splunk-new-http-input.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"22.333333333333336%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAECAIAAAABPYjBAAAACXBIWXMAAAsSAAALEgHS3X78AAAAtElEQVQI11WMzQqCUBCFfds2rQNfIBCCFlKIWglS3RY+UrRJ79/M3FIJtE3TlRZ9izNnZs5McDyd0zSN4zhJkrIsi6IQ4lJVlRAi/yfLs/3usN5G4Wq+iGbLTRige5J7OOe6vh/H8e1hMwzD1I4/plX/6rDV0GrsIKjrOwIQUaO0sZYNAPAvVmOMUorVerTWvgIBGUtKY1Dfro2UiMhjVr6RUpKHWz5mJUdIaKxhwwFOui/0AbN/y9zudHUDAAAAAElFTkSuQmCC')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk new http input\",\n    \"title\": \"splunk new http input\",\n    \"src\": \"/static/2991c7f7df940adcf56a0e7317dc6088/c1b63/splunk-new-http-input.png\",\n    \"srcSet\": [\"/static/2991c7f7df940adcf56a0e7317dc6088/5a46d/splunk-new-http-input.png 300w\", \"/static/2991c7f7df940adcf56a0e7317dc6088/0a47e/splunk-new-http-input.png 600w\", \"/static/2991c7f7df940adcf56a0e7317dc6088/c1b63/splunk-new-http-input.png 1200w\", \"/static/2991c7f7df940adcf56a0e7317dc6088/9cea8/splunk-new-http-input.png 1278w\"],\n    \"sizes\": \"(max-width: 1200px) 100vw, 1200px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"p\", null, \"Enter a name (e.g. \", mdx(\"inlineCode\", {\n    parentName: \"p\"\n  }, \"Sentry\"), \"), and click \\\"Next\\\":\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"1200px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/f65c1e3826992c330dfa84f6846531e0/9cea8/splunk-new-input-name.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"46.333333333333336%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAJCAIAAAC9o5sfAAAACXBIWXMAAAsSAAALEgHS3X78AAABG0lEQVQoz3WQ226DMAyG8+57gGkXu9lKGQOJ9qp7GHaNxClru4ZQkpATYS5sK6jbJ8uyJf/2L6PNZhOG4cp/9gMviqIgCLbb7W73dr+6e3x6CF5e/bW3/sHzPBgGCYzFcYw+Rwgl9FyztmWMiU5IKfc0k5oPbujdMMcNDrgUzqGyqkqMQX8aIYQIcRGrThPaNIw3QgltpemnsP0VRBpGmeBdJ5Wa9kHWWnPOz4x3yhjTK2OnkNq6mRHUcsGEPPMOpkAK+9yY67oGC1M7zGMGstYMS6y1SivwD+ahNv8DYju+4crxeMzzHL6wPxxgRV2TX05L/rgMsiRJ3kfSNM3zooKnlhXGmCxB/Y2YUpplGRwv8gIKyB/4m9HIlS+SuPHmszCECwAAAABJRU5ErkJggg==')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk new input name\",\n    \"title\": \"splunk new input name\",\n    \"src\": \"/static/f65c1e3826992c330dfa84f6846531e0/c1b63/splunk-new-input-name.png\",\n    \"srcSet\": [\"/static/f65c1e3826992c330dfa84f6846531e0/5a46d/splunk-new-input-name.png 300w\", \"/static/f65c1e3826992c330dfa84f6846531e0/0a47e/splunk-new-input-name.png 600w\", \"/static/f65c1e3826992c330dfa84f6846531e0/c1b63/splunk-new-input-name.png 1200w\", \"/static/f65c1e3826992c330dfa84f6846531e0/9cea8/splunk-new-input-name.png 1278w\"],\n    \"sizes\": \"(max-width: 1200px) 100vw, 1200px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"p\", null, \"Select the index you wish to make accessible (e.g. \", mdx(\"inlineCode\", {\n    parentName: \"p\"\n  }, \"main\"), \"), and click \\\"Review\\\":\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"1200px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/dd49630ca3f2c67186df0cb92fce5550/a3a5c/splunk-new-input-index.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"57.333333333333336%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAALCAIAAADwazoUAAAACXBIWXMAAAsSAAALEgHS3X78AAAA80lEQVQoz5WRi3KEIAxF+f9/XFvbWgHlYUV5ir1gdzpj3Znt0cmgyU1CQpZlmefZeReSX5yJd4avD+On/Q+5chyI1ppSqvXkvSuPdSmlPR+BP6Fgu4IIISBWUolxxCuljBDXxMjivQ8hwKb68wQZx5FRyhlnjEFsjEHKw4eDtdZVrsVSKpSdAFrXBZSCw1eg2fZchxBi2vJJjJpN07y072/dJ6r3PUUdOGCVUsgVt7yupb6P6RjVr3h/DHrGCEKlyvK57UdKTOm4rcUO43YZQ9AaVm3vrP+BtO3r7dZ0XcfKhXsMXzxN2fMwDJzzgReLT/k039qUfCUAu+X6AAAAAElFTkSuQmCC')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk new input index\",\n    \"title\": \"splunk new input index\",\n    \"src\": \"/static/dd49630ca3f2c67186df0cb92fce5550/c1b63/splunk-new-input-index.png\",\n    \"srcSet\": [\"/static/dd49630ca3f2c67186df0cb92fce5550/5a46d/splunk-new-input-index.png 300w\", \"/static/dd49630ca3f2c67186df0cb92fce5550/0a47e/splunk-new-input-index.png 600w\", \"/static/dd49630ca3f2c67186df0cb92fce5550/c1b63/splunk-new-input-index.png 1200w\", \"/static/dd49630ca3f2c67186df0cb92fce5550/a3a5c/splunk-new-input-index.png 1277w\"],\n    \"sizes\": \"(max-width: 1200px) 100vw, 1200px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"p\", null, \"You\\u2019ll be prompted to review the input details. Click \\\"Submit\\\" to continue:\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"624px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/df6ec95c375998ca33e6014477b507a8/39c09/splunk-new-input-review.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"89.33333333333334%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAASCAIAAADUsmlHAAAACXBIWXMAAAsSAAALEgHS3X78AAAB2klEQVQ4y5VSy27TQBT1J4JoXAkpicCEIBWJUBUWfALtji9gBRv2LFggIRYsKBAVEjsmTuOH/ErT+DVjj2fCiaOiYiBpj65GY8899545d6Ru98HR4XNFuddstnZlud1q3+90d3Yad+8orWarIcsdpSM3dg+eHPR6vb2He48f7T/df9a+rdy8cUuaGJMT4PuJpo1sx9KMwchQ1fFAG2Mz1A21rx73h59tnFlm4IdftU+vPrx4+f7wePhRsm1bVTVdHxnGZHYWnjqG6Zx6gWu75sT+6frOeDr6ofeDILBsa3Ee6ebg3bc3b7+81q2BRAhhFfI8Ty6QVoiTGGuWZoj0AjnNl2yJyAmVWFGY1gpZli2vBrEU65CEEIRQlCzLEgdFUaBLyTm0ZBnZXEWqfUO857qU0iSJHcdZ9UGPrWRRARuoYKwklCwWi6t2xp1nszBEhGGeF7AJXl5PdhRFnucxVqSV5dvJcRyfrTCPFudrwDy4CPO2k5GKPNwzjhPfD9AZw4TbSZqIP7GeyL9lg09pTglBkhCclazWChUvmy/9TxLn/O+fW8i/B4aVV7gsu1ZRqjHh1nw+ZwWjlOCRX29UIPu+j3eGsU+n03Tjg6+TYdX6YlxwlChLvoH8C8nI81JotLS7AAAAAElFTkSuQmCC')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk new input review\",\n    \"title\": \"splunk new input review\",\n    \"src\": \"/static/df6ec95c375998ca33e6014477b507a8/39c09/splunk-new-input-review.png\",\n    \"srcSet\": [\"/static/df6ec95c375998ca33e6014477b507a8/5a46d/splunk-new-input-review.png 300w\", \"/static/df6ec95c375998ca33e6014477b507a8/0a47e/splunk-new-input-review.png 600w\", \"/static/df6ec95c375998ca33e6014477b507a8/39c09/splunk-new-input-review.png 624w\"],\n    \"sizes\": \"(max-width: 624px) 100vw, 624px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"p\", null, \"The input has now been created, and you should be presented with the \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"Token Value\"), \":\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"983px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/bfb34526865090d05c82ec92c7a9d03a/91b29/splunk-new-input-final.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"54.666666666666664%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk new input final\",\n    \"title\": \"splunk new input final\",\n    \"src\": \"/static/bfb34526865090d05c82ec92c7a9d03a/91b29/splunk-new-input-final.png\",\n    \"srcSet\": [\"/static/bfb34526865090d05c82ec92c7a9d03a/5a46d/splunk-new-input-final.png 300w\", \"/static/bfb34526865090d05c82ec92c7a9d03a/0a47e/splunk-new-input-final.png 600w\", \"/static/bfb34526865090d05c82ec92c7a9d03a/91b29/splunk-new-input-final.png 983w\"],\n    \"sizes\": \"(max-width: 983px) 100vw, 983px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"h3\", {\n    \"id\": \"enabling-splunk-forwarding\",\n    \"style\": {\n      \"position\": \"relative\"\n    }\n  }, mdx(\"a\", _extends({\n    parentName: \"h3\"\n  }, {\n    \"href\": \"#enabling-splunk-forwarding\",\n    \"aria-label\": \"enabling splunk forwarding permalink\",\n    \"className\": \"anchor before\"\n  }), mdx(\"svg\", _extends({\n    parentName: \"a\"\n  }, {\n    \"viewBox\": \"0 0 24 24\",\n    \"xmlns\": \"http://www.w3.org/2000/svg\"\n  }), mdx(\"path\", _extends({\n    parentName: \"svg\"\n  }, {\n    \"d\": \"M10.879 6.05L15 1.93A5.001 5.001 0 0 1 22.071 9l-4.121 4.121a1 1 0 0 1-1.414-1.414l4.12-4.121a3 3 0 1 0-4.242-4.243l-4.121 4.121a1 1 0 1 1-1.414-1.414zm2.242 11.9L9 22.07A5 5 0 1 1 1.929 15l4.121-4.121a1 1 0 0 1 1.414 1.414l-4.12 4.121a3 3 0 1 0 4.242 4.243l4.121-4.121a1 1 0 1 1 1.414 1.414zm-8.364-.122l13.071-13.07a1 1 0 0 1 1.415 1.414L6.172 19.242a1 1 0 1 1-1.415-1.414z\",\n    \"fill\": \"currentColor\"\n  })))), \"Enabling Splunk Forwarding\"), mdx(\"p\", null, \"To enable Splunk forwarding, you\\u2019ll need the following:\"), mdx(\"ul\", null, mdx(\"li\", {\n    parentName: \"ul\"\n  }, \"Your instance URL (see note below)\"), mdx(\"li\", {\n    parentName: \"ul\"\n  }, \"The Sentry HEC token value\")), mdx(\"p\", null, \"In Sentry, navigate to the project you want to forward events from, and click \\\"Project Settings\\\".\"), mdx(\"h3\", {\n    \"id\": \"data-forwarding\",\n    \"style\": {\n      \"position\": \"relative\"\n    }\n  }, mdx(\"a\", _extends({\n    parentName: \"h3\"\n  }, {\n    \"href\": \"#data-forwarding\",\n    \"aria-label\": \"data forwarding permalink\",\n    \"className\": \"anchor before\"\n  }), mdx(\"svg\", _extends({\n    parentName: \"a\"\n  }, {\n    \"viewBox\": \"0 0 24 24\",\n    \"xmlns\": \"http://www.w3.org/2000/svg\"\n  }), mdx(\"path\", _extends({\n    parentName: \"svg\"\n  }, {\n    \"d\": \"M10.879 6.05L15 1.93A5.001 5.001 0 0 1 22.071 9l-4.121 4.121a1 1 0 0 1-1.414-1.414l4.12-4.121a3 3 0 1 0-4.242-4.243l-4.121 4.121a1 1 0 1 1-1.414-1.414zm2.242 11.9L9 22.07A5 5 0 1 1 1.929 15l4.121-4.121a1 1 0 0 1 1.414 1.414l-4.12 4.121a3 3 0 1 0 4.242 4.243l4.121-4.121a1 1 0 1 1 1.414 1.414zm-8.364-.122l13.071-13.07a1 1 0 0 1 1.415 1.414L6.172 19.242a1 1 0 1 1-1.415-1.414z\",\n    \"fill\": \"currentColor\"\n  })))), \"Data Forwarding\"), mdx(\"p\", null, \"Configure \", mdx(\"a\", _extends({\n    parentName: \"p\"\n  }, {\n    \"href\": \"/platform-redirect/?next=/data-management/data-forwarding/\"\n  }), \"Data Forwarding\"), \" in \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"[Project]\", \" > Settings > Data Forwarding\"), \", and provide the required information for the given integration.\"), mdx(\"p\", null, \"After navigating to \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"Data Forwarding\"), \", enable the Splunk integration:\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"1098px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/985a20fbf16b15f252f17c3d7e513b95/99661/splunk-data-forwarding-setting.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"70%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk data forwarding setting\",\n    \"title\": \"splunk data forwarding setting\",\n    \"src\": \"/static/985a20fbf16b15f252f17c3d7e513b95/99661/splunk-data-forwarding-setting.png\",\n    \"srcSet\": [\"/static/985a20fbf16b15f252f17c3d7e513b95/5a46d/splunk-data-forwarding-setting.png 300w\", \"/static/985a20fbf16b15f252f17c3d7e513b95/0a47e/splunk-data-forwarding-setting.png 600w\", \"/static/985a20fbf16b15f252f17c3d7e513b95/99661/splunk-data-forwarding-setting.png 1098w\"],\n    \"sizes\": \"(max-width: 1098px) 100vw, 1098px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"p\", null, \"Your instance URL is going to vary based on the type of Splunk service you\\u2019re using. If you\\u2019re using self-service Splunk Cloud, the instance URL will use the \", mdx(\"inlineCode\", {\n    parentName: \"p\"\n  }, \"input\"), \" prefix:\"), mdx(\"div\", {\n    \"className\": \"code-tabs-wrapper\"\n  }, mdx(CodeTabs, {\n    mdxType: \"CodeTabs\"\n  }, mdx(CodeBlock, {\n    language: \"\",\n    title: \"\",\n    filename: \"\",\n    mdxType: \"CodeBlock\"\n  }, mdx(\"div\", _extends({\n    parentName: \"div\"\n  }, {\n    \"className\": \"gatsby-highlight\",\n    \"data-language\": \"text\"\n  }), mdx(\"pre\", _extends({\n    parentName: \"div\"\n  }, {\n    \"className\": \"language-text\"\n  }), mdx(\"code\", _extends({\n    parentName: \"pre\"\n  }, {\n    \"className\": \"language-text\"\n  }), \"https://input-<host>:8088\")))))), mdx(\"p\", null, \"For all other Splunk Cloud plans, you\\u2019ll use the \", mdx(\"inlineCode\", {\n    parentName: \"p\"\n  }, \"http-inputs\"), \" prefix:\"), mdx(\"div\", {\n    \"className\": \"code-tabs-wrapper\"\n  }, mdx(CodeTabs, {\n    mdxType: \"CodeTabs\"\n  }, mdx(CodeBlock, {\n    language: \"\",\n    title: \"\",\n    filename: \"\",\n    mdxType: \"CodeBlock\"\n  }, mdx(\"div\", _extends({\n    parentName: \"div\"\n  }, {\n    \"className\": \"gatsby-highlight\",\n    \"data-language\": \"text\"\n  }), mdx(\"pre\", _extends({\n    parentName: \"div\"\n  }, {\n    \"className\": \"language-text\"\n  }), mdx(\"code\", _extends({\n    parentName: \"pre\"\n  }, {\n    \"className\": \"language-text\"\n  }), \"https://http-inputs-<host>:8088\")))))), mdx(\"p\", null, \"If you\\u2019re using Splunk behind your firewall, you\\u2019ll need to fill in the appropriate host.\"), mdx(\"p\", null, \"Once you\\u2019ve filled in the required fields, hit \", mdx(\"strong\", {\n    parentName: \"p\"\n  }, \"Save Changes\"), \":\"), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"809px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/6286c9459910075af5f2160f50da54a2/e80ac/splunk-data-forwarding-setting-complete.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"63.33333333333333%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAANCAIAAAAmMtkJAAAACXBIWXMAAAsSAAALEgHS3X78AAAA/UlEQVQoz5VSu07EMBD0//8EojrR0FHS0NDwB9BQHMfdJY4fSbxrZ50bm4cQ4rhkNLIse9eeGVt1nRWZp0nAlKaLRJn3gzVuElHGuHEMMSZQJOc8V+YsWbD/F5kjccRE7d72u+27s94aG8bAFAlDIA4sZ/B5tGRl0WY9xLdt1xzaTltXV5zrUTedQ9WvtDZDP/S+J2Imhqt5GcrNnTbwAMMfS0XRD4H/UiDbRQRADBmXqn9THQ9NCITAi4m1zUM/ftvIa1BkN8c2xVSejhZF9fURamAl9vp1YpR5DUrzwlJcBeiGNlfPN9cvd7evKYla7LB0e8cP91vw6XGPfE9dHvtbDqV/bAAAAABJRU5ErkJggg==')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk data forwarding setting complete\",\n    \"title\": \"splunk data forwarding setting complete\",\n    \"src\": \"/static/6286c9459910075af5f2160f50da54a2/e80ac/splunk-data-forwarding-setting-complete.png\",\n    \"srcSet\": [\"/static/6286c9459910075af5f2160f50da54a2/5a46d/splunk-data-forwarding-setting-complete.png 300w\", \"/static/6286c9459910075af5f2160f50da54a2/0a47e/splunk-data-forwarding-setting-complete.png 600w\", \"/static/6286c9459910075af5f2160f50da54a2/e80ac/splunk-data-forwarding-setting-complete.png 809w\"],\n    \"sizes\": \"(max-width: 809px) 100vw, 809px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")), mdx(\"p\", null, \"We\\u2019ll now begin forwarding all new events into your Splunk instance.\"), mdx(Note, {\n    mdxType: \"Note\"\n  }, mdx(\"markdown\", null, mdx(\"p\", null, \"Sentry will internally limit the maximum number of events sent to your Splunk instance to 50 per second.\"))), mdx(\"p\", null, mdx(\"span\", _extends({\n    parentName: \"p\"\n  }, {\n    \"className\": \"gatsby-resp-image-wrapper\",\n    \"style\": {\n      \"position\": \"relative\",\n      \"display\": \"block\",\n      \"marginLeft\": \"auto\",\n      \"marginRight\": \"auto\",\n      \"maxWidth\": \"1099px\"\n    }\n  }), \"\\n      \", mdx(\"a\", _extends({\n    parentName: \"span\"\n  }, {\n    \"className\": \"gatsby-resp-image-link\",\n    \"href\": \"/static/b52c4c0f2679099121b177c396a372f2/2c95d/splunk-search-sentry.png\",\n    \"style\": {\n      \"display\": \"block\"\n    },\n    \"target\": \"_blank\",\n    \"rel\": \"noopener\"\n  }), \"\\n    \", mdx(\"span\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-background-image\",\n    \"style\": {\n      \"paddingBottom\": \"77%\",\n      \"position\": \"relative\",\n      \"bottom\": \"0\",\n      \"left\": \"0\",\n      \"backgroundImage\": \"url('data:image/png;base64,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')\",\n      \"backgroundSize\": \"cover\",\n      \"display\": \"block\"\n    }\n  })), \"\\n  \", mdx(\"img\", _extends({\n    parentName: \"a\"\n  }, {\n    \"className\": \"gatsby-resp-image-image\",\n    \"alt\": \"splunk search sentry\",\n    \"title\": \"splunk search sentry\",\n    \"src\": \"/static/b52c4c0f2679099121b177c396a372f2/2c95d/splunk-search-sentry.png\",\n    \"srcSet\": [\"/static/b52c4c0f2679099121b177c396a372f2/5a46d/splunk-search-sentry.png 300w\", \"/static/b52c4c0f2679099121b177c396a372f2/0a47e/splunk-search-sentry.png 600w\", \"/static/b52c4c0f2679099121b177c396a372f2/2c95d/splunk-search-sentry.png 1099w\"],\n    \"sizes\": \"(max-width: 1099px) 100vw, 1099px\",\n    \"style\": {\n      \"width\": \"100%\",\n      \"height\": \"100%\",\n      \"margin\": \"0\",\n      \"verticalAlign\": \"middle\",\n      \"position\": \"absolute\",\n      \"top\": \"0\",\n      \"left\": \"0\"\n    },\n    \"loading\": \"lazy\"\n  })), \"\\n  \"), \"\\n    \")));\n}\n;\nMDXContent.isMDXComponent = true;","tableOfContents":{"items":[{"url":"#install-and-configure","title":"Install and Configure","items":[{"url":"#enabling-hec","title":"Enabling HEC"},{"url":"#creating-a-sentry-input","title":"Creating a Sentry Input"},{"url":"#enabling-splunk-forwarding","title":"Enabling Splunk Forwarding"},{"url":"#data-forwarding","title":"Data Forwarding"}]}]},"internal":{"type":"Mdx"}}}},"pageContext":{"excerpt":"Connect Splunk to Sentry with the  Data Forwarding  feature. We only support Splunk Cloud plans. We do not support Splunk Enterprise plans. See the  Splunk documentation  for specific details on your Splunk installation. This integration needs to be set up in each project for which you wish to use it. It is maintained and supported by the  Sentry community . Install and Configure Sentry owner or manager permissions permissions are required to install this integration. Navigate to  Settings > Integrations > Splunk Enabling HEC To get started, you’ll need to first enable the HTTP Event Collector: Under  Settings , select  Data Inputs : Select  HTTP Event Collector  under Local Inputs: Under your HEC settings, click \"Global Settings\": Change  All Tokens  to  Enabled , and note the HTTP Port Number ( 8088  by default): If you’re running Splunk in a privileged environment, you may need to expose the HEC port. Creating a Sentry Input Under HTTP Event Collector, create a new Sentry input by clicking \"New Token\": Enter a name (e.g.  Sentry ), and click \"Next\": Select the index you wish to make accessible (e.g.  main ), and click \"Review\": You’ll be prompted to review the input details. Click \"Submit\" to continue: The input has now been created, and you should be presented with the  Token Value : Enabling Splunk Forwarding To enable Splunk forwarding, you’ll need the following: Your instance URL (see note below) The Sentry HEC token value In Sentry, navigate to the project you want to forward events from, and click \"Project Settings\". Data Forwarding Configure  Data Forwarding  in  Project  > Settings > Data Forwarding , and provide the required information for the given integration. After navigating to  Data Forwarding , enable the Splunk integration: Your instance URL is going to vary based on the type of Splunk service you’re using. If you’re using self-service Splunk Cloud, the instance URL will use the  input  prefix: For all other Splunk Cloud plans, you’ll use the  http-inputs  prefix: If you’re using Splunk behind your firewall, you’ll need to fill in the appropriate host. Once you’ve filled in the required fields, hit  Save Changes : We’ll now begin forwarding all new events into your Splunk instance. Sentry will internally limit the maximum number of events sent to your Splunk instance to 50 per second.","title":"Splunk","description":null,"draft":null,"noindex":null,"notoc":null,"sidebar_order":1,"redirect_from":["/workflow/integrations/splunk/","/workflow/integrations/legacy-integrations/splunk/"],"keywords":null,"id":"1b63c37b-1cfc-5f42-be26-ecbcfb05b015","legacy":false}},"staticQueryHashes":["1218203755","1222113826","1222113826","1766336459","2158593473","2764967025","3345802723","3818502851","3990806462","4015007367","4192517163","4264099332","518019976"]}