flow.record.adapter.splunk#

Module Contents#

Classes#

Functions#

Attributes#

flow.record.adapter.splunk.__usage__ = Multiline-String#
Show Value
"""
Splunk output adapter (writer only)
---
Write usage: rdump -w splunk://[IP]:[PORT]?tag=[TAG]
[IP]:[PORT]: ip and port to a splunk instance
[TAG]: optional value to add as "rdtag" output field when writing
"""
flow.record.adapter.splunk.log#
flow.record.adapter.splunk.RESERVED_SPLUNK_FIELDS#
flow.record.adapter.splunk.splunkify(record, tag=None)#
class flow.record.adapter.splunk.SplunkWriter(path, tag=None, **kwargs)#

Bases: flow.record.adapter.AbstractWriter

sock#
write(record)#

Write a record.

flush()#

Flush any buffered writes.

close()#

Close the Writer, no more writes will be possible.

class flow.record.adapter.splunk.SplunkReader(path, selector=None, **kwargs)#

Bases: flow.record.adapter.AbstractReader