Skip to main content

handle_event

servers::http::splunk

Function handle_event 

Source 
pub async fn handle_event(
    __arg0: State<LogState>,
    __arg1: Query<LogIngesterQueryParams>,
    __arg2: Extension<QueryContext>,
    headers: HeaderMap,
    payload: Bytes,
) -> impl IntoResponse
Expand description

POST /services/collector/event (+ /services/collector, /event/1.0 aliases). Parses HEC events, runs them through the pipeline (identity default, overridable), and inserts with metadata columns as tags.