Splunk HEC

Send reporting events and projected metrics through the Splunk HTTP Event Collector event endpoint.

Reporting

Realtime reporting

Choose the built-in sink page that matches the observability stack your team already uses. Each tab below opens a dedicated page instead of swapping content in place.

When To Use Splunk HEC

Use Splunk when your team already searches and alerts on HEC event streams and wants both reporting events and projected metrics exported from the same LoadStrike run.

What LoadStrike Sends

SplunkReportingSink sends both reporting events and metric projections through the Splunk HEC event endpoint. Final export also includes final metric snapshots plus run-result metadata in the same sink flow.

Configuration Surface

Configure the sink in code or through LoadStrike:ReportingSinks:Splunk. Common options include BaseUrl, Token, Source, Sourcetype, Index, and StaticFields.

Downloads

Splunk setup is supported through the downloadable JSON infra-config template and the shared observability asset guide.

Splunk HEC realtime reporting

Use SplunkReportingSink when you want both reporting events and projected metrics exported through the Splunk HEC event endpoint.

Switch between C#, Java, Python, TypeScript, and JavaScript to see the native SDK shape for this sample.

Licensing note: every runnable sample requires a valid runner key via WithRunnerKey("...") or config key LoadStrike:RunnerKey.

HTML reports include an icon-only Light/Dark theme toggle fixed at the top-right. Default report theme is Light.

Splunk HEC Sink

var splunkSink = new SplunkReportingSink(new SplunkReportingSinkOptions
{
    BaseUrl = "https://splunk.example.com",
    Token = "splunk-hec-token",
    Source = "loadstrike",
    Sourcetype = "_json",
    Index = "observability",
    StaticFields =
    {
        ["environment"] = "preprod",
        ["service"] = "checkout"
    }
});

LoadStrikeRunner.RegisterScenarios(scenario)
    .WithReportingSinks(splunkSink)
    .WithRunnerKey("rkl_your_local_runner_key")
    .Run();

import com.loadstrike.runtime.LoadStrikeRunner;
import com.loadstrike.runtime.LoadStrikeSinks;

var options = new LoadStrikeSinks.SplunkSinkOptions();
options.baseUrl = "https://splunk.example.com";
options.token = "splunk-hec-token";
options.source = "loadstrike";
options.sourcetype = "_json";
options.index = "observability";
options.staticFields.put("environment", "preprod");
options.staticFields.put("service", "checkout");

var sink = new LoadStrikeSinks.SplunkReportingSink(options);

LoadStrikeRunner.registerScenarios(scenario)
    .withReportingSinks(sink)
    .withRunnerKey("rkl_your_local_runner_key")
    .run();

from loadstrike_sdk import LoadStrikeRunner, SplunkReportingSink

sink = SplunkReportingSink(
    base_url="https://splunk.example.com",
    token="splunk-hec-token",
    source="loadstrike",
    sourcetype="_json",
    index="observability",
    static_fields={
        "environment": "preprod",
        "service": "checkout",
    },
)

LoadStrikeRunner.register_scenarios(scenario) \
    .with_reporting_sinks(sink) \
    .with_runner_key("rkl_your_local_runner_key") \
    .run()

import {
  LoadStrikeRunner,
  SplunkReportingSink,
  SplunkReportingSinkOptions
} from "@loadstrike/loadstrike-sdk";

const sink = new SplunkReportingSink(new SplunkReportingSinkOptions({
  BaseUrl: "https://splunk.example.com",
  Token: "splunk-hec-token",
  Source: "loadstrike",
  Sourcetype: "_json",
  Index: "observability",
  StaticFields: {
    environment: "preprod",
    service: "checkout"
  }
}));

await LoadStrikeRunner
  .registerScenarios(scenario)
  .withReportingSinks(sink)
  .withRunnerKey("rkl_your_local_runner_key")
  .run();

const {
  LoadStrikeRunner,
  SplunkReportingSink,
  SplunkReportingSinkOptions
} = require("@loadstrike/loadstrike-sdk");

const sink = new SplunkReportingSink(new SplunkReportingSinkOptions({
  BaseUrl: "https://splunk.example.com",
  Token: "splunk-hec-token",
  Source: "loadstrike",
  Sourcetype: "_json",
  Index: "observability",
  StaticFields: {
    environment: "preprod",
    service: "checkout"
  }
}));

await LoadStrikeRunner
  .registerScenarios(scenario)
  .withReportingSinks(sink)
  .withRunnerKey("rkl_your_local_runner_key")
  .run();

Splunk HEC setup checklist

Config path

LoadStrike:ReportingSinks:Splunk

Common options

BaseUrl, Token, Source, Sourcetype, Index, and StaticFields.

Best fit

Teams already querying Splunk HEC event streams and wanting both event and metric projections from the same LoadStrike run.

Final export

Final metric snapshots and run-result metadata are included together with the sink event stream.

{
  "LoadStrike": {
    "ReportingSinks": {
      "Splunk": {
        "BaseUrl": "https://splunk.example.com",
        "Token": "splunk-hec-token",
        "Source": "loadstrike",
        "Sourcetype": "_json",
        "Index": "observability"
      }
    }
  }
}

Downloads and templates

Use the Splunk HEC template when you want to bind sink settings from infra config.

Splunk template JSON

Ready-to-edit infra-config template for SplunkReportingSink.

Download file

Observability asset guide

Combined guide for sink templates and Grafana starter assets.

Download file