Amazon Kinesis Modular Input

Overview

Details

This is a Splunk Modular Input Add-On for indexing records from Amazon Kinesis

Release Notes

Version 1.5

May 16, 2020

Dual Python 2.7 and 3+ compatibility.

App will run on :

Splunk Enterprise versions back to Splunk 5 where there is only a Python 2.7 runtime shipped
Splunk Enterprise version 8 where there is both a Python 2.7 and Python 3+ runtime shipped
Future versions of Splunk Enterprise where there is only a Python 3+ runtime

Version 1.4

Dec. 30, 2019

added JAXB dependencies for JRE 9+
fixed Splunk 8 compatibility for manager.xml file

Version 1.3.4

June 25, 2019

cosmetic fixes

Version 1.3.3

May 10, 2019

cosmetic fixes

Version 1.3.2

April 23, 2019

updated docs

Version 1.3.1

April 19, 2019

added trial key functionality

Version 1.3

March 28, 2019

docs updated

Version 1.2

June 3, 2018

minor manager xml ui tweak for 7.1

Version 1.1

May 27, 2018

Added an activation key requirement , visit http://www.baboonbones.com/#activation to obtain a free,non-expiring key
Docs updated
Splunk 7.1 compatible

Version 1.0.3

April 21, 2016

Added JSON Object parsing for Cloudwatch to the GZIP handler

Version 1.0.2

April 16, 2016

tweaks to gzip handler

Version 1.0.1

April 13, 2016

Pushed default charset decoding out of the main message processing flow and into custom handling , so custom handlers that you implement should in theory be able to process any binary or text payload.

Version 1.0

April 12, 2016

Can now pass the raw payload bytes to your custom message handler ie: if you want to decode binary data
Added a custom GZIP decoder , com.splunk.modinput.kinesis.GZIPDataRecordDecoderHandler

Version 0.9

Nov. 10, 2015

Tweaked the HEC transport.

Added a new custom handler that allows you to declare the fieldnames in the JSON that hold the time and host values of the event.

message_handler_impl = com.splunk.modinput.kinesis.JSONBodyWithFieldExtraction
message_handler_params = timefield=foo,hostfield=goo

Version 0.8

Sept. 22, 2015

Added support to optional output to Splunk via a HEC (HTTP Event Collector) endpoint

Version 0.7

Feb. 11, 2015

Enabled TLS1.2 support by default.
Made the core Modular Input Framework compatible with latest Splunk Java SDK
Please use a Java Runtime version 7+
If you need to use SSLv3 , you can turn this on in bin/kinesis.py
SECURE_TRANSPORT = "tls"
#SECURE_TRANSPORT = "ssl"

Version 0.6

Sept. 12, 2014

Added a custom message handler that just dumps the JSON body.

message_handler_impl = com.splunk.modinput.kinesis.JSONOnlyMessageHandler

Version 0.5

Aug. 30, 2014

Initial Beta release

Installs

1,158

Downloads

Share Subscribe LOGIN TO DOWNLOAD

Version

Built by

BaboonBones Ltd

Contributors

BaboonBones Ltd

Support

Developer Supported

Contact Developer Questions on Splunk Answers Flag as inappropriate

App Contents: Inputs