{"categories":[{"label":"Logging","url":"https://skillfed.io/packages/category/system-logging"}],"enrichment":{"capability":"Integrates Python logging with Splunk's HTTP Event Collector (HEC) to send log messages directly to Splunk as JSON events.","skillfed_tags":["splunk-integration","logging-handler","abandoned-but-stable"],"use_cases":["Centralize application logs from Python services into Splunk for monitoring and analysis.","Send structured event data (dicts with custom fields) to Splunk indexes for security or operational intelligence.","Route logs to multiple Splunk indexes by configuring different handlers with different tokens or index settings.","Add custom metadata fields (host, source, sourcetype) to log events at the application level.","Integrate Python application logging with existing Splunk infrastructure without external log collectors."],"what_it_does":"This package provides a Python logging handler that sends log records to Splunk via its HTTP Event Collector (HEC) API. It wraps the standard Python logging framework to route messages directly into Splunk as JSON events, allowing you to centralize application logs in Splunk without separate log file collection. The handler automatically timestamps events, preserves dictionary objects as structured JSON, and supports custom fields and metadata overrides through a 'fields' key in log records.\n\nThe handler depends only on requests for HTTP communication and is designed to work across Linux, macOS, and Windows. It supports both HTTP and HTTPS connections, with optional SSL verification control for self-signed certificates. String log messages are converted to JSON with 'log_level' and 'message' keys, while dictionary objects are logged as-is, making it flexible for both simple text logging and structured event logging.","worth_installing":"Yes, if you are already committed to Splunk and need straightforward Python logging integration. The package is simple, has low install friction, and carries a permissive license. However, the abandoned maintenance status (last update 2023-02-16) means you should verify compatibility with your Splunk version and Python runtime before production deployment, and be prepared to maintain a fork if critical issues arise."},"id":"splunk-hec-handler","links":{"html":"https://skillfed.io/packages/splunk-hec-handler","md":"https://skillfed.io/packages/splunk-hec-handler.md","pypi":"https://pypi.org/project/splunk-hec-handler/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2023-02-16","license_spdx":null,"license_treatment":"permissive","name":"splunk-hec-handler","python_support":"unspecified","summary":"A Python logging handler to sends logs to Splunk using HTTP event collector (HEC)"},"popularity":{"monthly_downloads":99999,"position":13006,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.2.0"}
