Add splunk as a datasource

[intuit]

Add splunk as a datasource

[smandalika1]

@MadaraUchiha-314 - Is this still needed?

[MadaraUchiha-314]

@smandalika1 Yes.

[kokikathir]

@MadaraUchiha-314, I m interested in this

[MadaraUchiha-314]

@kokikathir Sure Feel free to take it up. I have assigned it to you.

[kokikathir]

Thanks @MadaraUchiha-314

Can you give me some overview of the task

[kokikathir]

@MadaraUchiha-314, I m planning to use the below config for splunk. Is it fine?

{
"channel_type": "splunk",
"channel_name": "pi",
"file_type": "json",
"file_path": null,
"is_channel_enabled": true,
"timestamp_key": "updated",
"timestamp_format": "",
"timezone": "UTC",
"message_key": "content",
"rating_key": "rating",
"host": "splunk-rest-XXXX",
"port": 443,
"username": "XXXX",
"password": "XXXX",
"query" : "index=XXXX",
"earliest_time" : "15m",
"latest_time" : "now"
}