Splunk

Fastly will POST messages to your Splunk account in the format specified in the Splunk object.

Data model

`format`	string	A Fastly log format string. [Default `%h %l %u %t "%r" %>s %b`]
`format_version`	integer	The version of the custom logging format used for the configured endpoint. The logging call gets placed by default in `vcl_log` if `format_version` is set to `2` and in `vcl_deliver` if `format_version` is set to `1`. [Default `2`]
`name`	string	The name for the real-time logging configuration.
`placement`	string	Where in the generated VCL the logging call should be placed. If not set, endpoints with `format_version` of 2 are placed in `vcl_log` and those with `format_version` of 1 are placed in `vcl_deliver`.
`request_max_bytes`	integer	The maximum number of bytes sent in one request. Defaults `0` for unbounded. [Default `0`]
`request_max_entries`	integer	The maximum number of logs sent in one request. Defaults `0` for unbounded. [Default `0`]
`response_condition`	string	The name of an existing condition in the configured endpoint, or leave blank to always execute.
`tls_ca_cert`	string	A secure certificate to authenticate a server with. Must be in PEM format.
`tls_client_cert`	string	The client certificate used to make authenticated requests. Must be in PEM format.
`tls_client_key`	string	The client private key used to make authenticated requests. Must be in PEM format.
`tls_hostname`	string	The hostname to verify the server's certificate. This should be one of the Subject Alternative Name (SAN) fields for the certificate. Common Names (CN) are not supported.
`token`	string	A Splunk token for use in posting logs over HTTP to your collector.
`url`	string	The URL to post logs to.
`use_tls`	integer	Whether to use TLS. [Default `0`]
`created_at`	string	Date and time in ISO 8601 format. Read-only.
`deleted_at`	string	Date and time in ISO 8601 format. Read-only.
`service_id`	string	Alphanumeric string identifying the service. Read-only.
`updated_at`	string	Date and time in ISO 8601 format. Read-only.
`version`	integer	Integer identifying a service version. Read-only.

Endpoints

List Splunk log endpoints

GET/service/service_id/version/version_id/logging/splunk

Create a Splunk log endpoint

POST/service/service_id/version/version_id/logging/splunk

Get a Splunk log endpoint

GET/service/service_id/version/version_id/logging/splunk/logging_splunk_name

Update a Splunk log endpoint

PUT/service/service_id/version/version_id/logging/splunk/logging_splunk_name

Delete a Splunk log endpoint

DELETE/service/service_id/version/version_id/logging/splunk/logging_splunk_name