Created
April 22, 2024 13:24
-
-
Save andywatts/5d3fe0071b4d81c87ed1627e62045bad to your computer and use it in GitHub Desktop.
Vector splunk sink Error=None
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 2024-04-18T16:42:02.044399Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector::utilization: utilization=0.000000031825143731275246 | |
| 2024-04-18T16:42:07.045066Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector::utilization: utilization=0.000000032158622386128845 | |
| 2024-04-18T16:42:12.044801Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector::utilization: utilization=0.000000032017398494564164 | |
| 2024-04-18T16:42:13.524139Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: vector::sources::kubernetes_logs::k8s_paths_provider: Verifying Namespace metadata for pod. pod=Some("splunk-logging-dgf65") | |
| 2024-04-18T16:42:13.524179Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: vector::sources::kubernetes_logs::k8s_paths_provider: Providing log paths for pod. pod=Some("splunk-logging-dgf65") | |
| 2024-04-18T16:42:13.529113Z INFO source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: vector::internal_events::file::source: Resuming to watch file. file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log file_position=4512423 | |
| 2024-04-18T16:42:13.620530Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=242 | |
| 2024-04-18T16:42:13.620546Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=259 | |
| 2024-04-18T16:42:13.620559Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=237 | |
| 2024-04-18T16:42:13.620576Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=214 | |
| 2024-04-18T16:42:13.620587Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=242 | |
| 2024-04-18T16:42:13.620631Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=313 | |
| 2024-04-18T16:42:13.620641Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=307 | |
| 2024-04-18T16:42:13.620662Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=287 | |
| 2024-04-18T16:42:13.620916Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=265 | |
| 2024-04-18T16:42:13.620952Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=214 | |
| 2024-04-18T16:42:13.620988Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=297 | |
| 2024-04-18T16:42:13.621003Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=274 | |
| 2024-04-18T16:42:13.621055Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=268 | |
| 2024-04-18T16:42:13.621070Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=241 | |
| 2024-04-18T16:42:13.621094Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=214 | |
| 2024-04-18T16:42:13.621128Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=242 | |
| 2024-04-18T16:42:13.621183Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=246 | |
| 2024-04-18T16:42:13.621261Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=232 | |
| 2024-04-18T16:42:13.621277Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}:file_server: file_source::file_server: Read bytes. path="/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log" bytes=213 | |
| 2024-04-18T16:42:13.621755Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1417 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.621854Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1434 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.621916Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1412 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.621995Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1389 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622051Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1417 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622150Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1488 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622218Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1482 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622276Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1462 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622350Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1440 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622420Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1389 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622486Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1472 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622546Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1449 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622645Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1443 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622710Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1416 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622780Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1389 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622860Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1417 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.622949Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1421 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.623014Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1407 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.623084Z TRACE source{component_kind="source" component_id=all_kubernetes_logs component_type=kubernetes_logs component_name=all_kubernetes_logs}: vector::internal_events::kubernetes_logs: Events received. count=1 byte_size=1388 file=/var/log/pods/splunk-connect_splunk-logging-dgf65_fbf1bd05-c41c-4fa5-beaf-a69d77c703e2/splunk-fluentd-k8s-logs/0.log | |
| 2024-04-18T16:42:13.664572Z TRACE transform{component_kind="transform" component_id=trimMetadataForSplunk component_type=remap component_name=trimMetadataForSplunk}: vector_core::fanout: Processing control message outside of send: ControlMessage::Add(ComponentKey { id: "splunk" }) | |
| 2024-04-18T16:42:13.664731Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=349 byte_size=244470 | |
| 2024-04-18T16:42:14.065188Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=1000 byte_size=715316 | |
| 2024-04-18T16:42:14.073760Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=1000 byte_size=715929 | |
| 2024-04-18T16:42:14.077493Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=0 request_id=1 | |
| 2024-04-18T16:42:14.077552Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[512497 bytes] | |
| 2024-04-18T16:42:14.077578Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.077587Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::pool: removing closed connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.077598Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::pool: checkout waiting for idle connection: ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.077619Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::connect::http: Http::connect; scheme=Some("https"), host=Some("http-inputs-redactedp.splunkcloud.com"), port=None | |
| 2024-04-18T16:42:14.077654Z DEBUG hyper::client::connect::dns: resolving host="http-inputs-redactedp.splunkcloud.com" | |
| 2024-04-18T16:42:14.084889Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::connect::http: connecting to 44.196.11.214:443 | |
| 2024-04-18T16:42:14.084988Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: mio::poll: registering event source with poller: token=Token(16777219), interests=READABLE | WRITABLE | |
| 2024-04-18T16:42:14.086616Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::connect::http: connected to 44.196.11.214:443 | |
| 2024-04-18T16:42:14.087790Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::conn: client handshake Http1 | |
| 2024-04-18T16:42:14.087847Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::client: handshake complete, spawning background dispatcher task | |
| 2024-04-18T16:42:14.087941Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: want: poll_want: taker wants! | |
| 2024-04-18T16:42:14.087957Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::pool: checkout dropped for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.098970Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.098978Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.099001Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.099037Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}: vector::internal_events::common: Bytes sent. byte_size=512497 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.099082Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=1 request_id=2 | |
| 2024-04-18T16:42:14.099156Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=2}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[514180 bytes] | |
| 2024-04-18T16:42:14.099173Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=2}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.099182Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=2}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.099252Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=1000 byte_size=712128 | |
| 2024-04-18T16:42:14.102415Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=23 byte_size=16773 | |
| 2024-04-18T16:42:14.102500Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=0 | |
| 2024-04-18T16:42:14.103756Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=79 byte_size=56079 | |
| 2024-04-18T16:42:14.104142Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=48 byte_size=35729 | |
| 2024-04-18T16:42:14.164217Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=2}:http: hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.164240Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=2}:http: hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.164267Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=2}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.164296Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=2}: vector::internal_events::common: Bytes sent. byte_size=514180 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.164375Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=2 request_id=3 | |
| 2024-04-18T16:42:14.164449Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[516834 bytes] | |
| 2024-04-18T16:42:14.164476Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.164490Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.164556Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}: vector_core::stream::driver: Service call succeeded. request_id=1 | |
| 2024-04-18T16:42:14.164577Z ERROR sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}: vector_common::internal_event::service: Service call failed. No retries or retries exhausted. error=None request_id=1 error_type="request_failed" stage="sending" internal_log_rate_limit=true | |
| 2024-04-18T16:42:14.164547Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=0 | |
| 2024-04-18T16:42:14.164600Z ERROR sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=1}: vector_common::internal_event::component_events_dropped: Events dropped intentional=false count=623 reason="Service call failed. No retries or retries exhausted." internal_log_rate_limit=true | |
| 2024-04-18T16:42:14.175411Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}:http: hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.175429Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}:http: hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.175458Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.175489Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}: vector::internal_events::common: Bytes sent. byte_size=516834 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.175550Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=2 request_id=4 | |
| 2024-04-18T16:42:14.175613Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=4}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[513931 bytes] | |
| 2024-04-18T16:42:14.175634Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=4}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.175642Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=4}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.175778Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=1 | |
| 2024-04-18T16:42:14.183283Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=4}:http: hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.183307Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=4}:http: hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.183332Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=4}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.183359Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=4}: vector::internal_events::common: Bytes sent. byte_size=513931 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.183397Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=3 request_id=5 | |
| 2024-04-18T16:42:14.183443Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=5}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[512076 bytes] | |
| 2024-04-18T16:42:14.183465Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=5}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.183478Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=5}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.183515Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=1 | |
| 2024-04-18T16:42:14.183532Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}: vector_core::stream::driver: Service call succeeded. request_id=3 | |
| 2024-04-18T16:42:14.183552Z ERROR sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}: vector_common::internal_event::service: Internal log [Service call failed. No retries or retries exhausted.] is being suppressed to avoid flooding. | |
| 2024-04-18T16:42:14.183569Z ERROR sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=3}: vector_common::internal_event::component_events_dropped: Internal log [Events dropped] is being suppressed to avoid flooding. | |
| 2024-04-18T16:42:14.193101Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=5}:http: hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.193113Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=5}:http: hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.193140Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=5}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.193188Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=5}: vector::internal_events::common: Bytes sent. byte_size=512076 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.193261Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=0 | |
| 2024-04-18T16:42:14.193276Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=2}: vector_core::stream::driver: Service call succeeded. request_id=2 | |
| checkout waiting for idle connection: ("https", http-inputs-redactedp.splunkcloud.com) | |
| take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.492983Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=1000 byte_size=734068 | |
| 2024-04-18T16:42:14.496580Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=1000 byte_size=727112 | |
| 2024-04-18T16:42:14.501946Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=2 request_id=6 | |
| 2024-04-18T16:42:14.502022Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=6}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[520159 bytes] | |
| 2024-04-18T16:42:14.502054Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=6}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.502076Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=6}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.510558Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=6}:http: hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.510570Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=6}:http: hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.510589Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=6}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.510613Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=6}: vector::internal_events::common: Bytes sent. byte_size=520159 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.510650Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=3 request_id=7 | |
| 2024-04-18T16:42:14.510692Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=7}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[519936 bytes] | |
| 2024-04-18T16:42:14.510715Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=7}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.510726Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=7}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.510743Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=4 request_id=8 | |
| 2024-04-18T16:42:14.510770Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[517467 bytes] | |
| 2024-04-18T16:42:14.510792Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: hyper::client::pool: checkout waiting for idle connection: ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.510808Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: hyper::client::connect::http: Http::connect; scheme=Some("https"), host=Some("http-inputs-redactedp.splunkcloud.com"), port=None | |
| 2024-04-18T16:42:14.510830Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=2 | |
| 2024-04-18T16:42:14.510851Z DEBUG hyper::client::connect::dns: resolving host="http-inputs-redactedp.splunkcloud.com" | |
| 2024-04-18T16:42:14.567231Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: hyper::client::connect::http: connecting to 52.7.207.107:443 | |
| 2024-04-18T16:42:14.567315Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: mio::poll: registering event source with poller: token=Token(16777220), interests=READABLE | WRITABLE | |
| 2024-04-18T16:42:14.569025Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: hyper::client::connect::http: connected to 52.7.207.107:443 | |
| 2024-04-18T16:42:14.571663Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=1000 byte_size=733170 | |
| 2024-04-18T16:42:14.574203Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_common::internal_event::events_received: Events received. count=338 byte_size=245528 | |
| 2024-04-18T16:42:14.575214Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: hyper::client::conn: client handshake Http1 | |
| 2024-04-18T16:42:14.575237Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: hyper::client::client: handshake complete, spawning background dispatcher task | |
| 2024-04-18T16:42:14.575290Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=7}:http: hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.575316Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=7}:http: hyper::client::pool: put; found waiter for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.575393Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=7}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.575422Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=7}: vector::internal_events::common: Bytes sent. byte_size=519936 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.575468Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.575542Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=1 | |
| 2024-04-18T16:42:14.575546Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=4}: vector_core::stream::driver: Service call succeeded. request_id=4 | |
| 2024-04-18T16:42:14.576012Z TRACE hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.576020Z DEBUG hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.583527Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.583539Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.583591Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.583617Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=8}: vector::internal_events::common: Bytes sent. byte_size=517467 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.583681Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=4 request_id=9 | |
| 2024-04-18T16:42:14.583733Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=9}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[519520 bytes] | |
| 2024-04-18T16:42:14.583752Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=9}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.583769Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=9}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.583824Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=0 | |
| 2024-04-18T16:42:14.583844Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=5}: vector_core::stream::driver: Service call succeeded. request_id=5 | |
| 2024-04-18T16:42:14.592621Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=9}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.592655Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=9}: vector::internal_events::common: Bytes sent. byte_size=519520 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.592997Z TRACE hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.593003Z DEBUG hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.593047Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=4 request_id=10 | |
| 2024-04-18T16:42:14.593093Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=10}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[520488 bytes] | |
| 2024-04-18T16:42:14.593118Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=10}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.593129Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=10}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.593189Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=3 | |
| 2024-04-18T16:42:14.601443Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=10}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.601492Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=10}: vector::internal_events::common: Bytes sent. byte_size=520488 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.601722Z TRACE hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.601731Z DEBUG hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.601767Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}: vector_core::stream::driver: Submitting service request. in_flight_requests=5 request_id=11 | |
| 2024-04-18T16:42:14.601812Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=11}:http: vector::internal_events::http_client: Sending HTTP request. uri=https://http-inputs-redactedp.splunkcloud.com/services/collector/event method=POST version=HTTP/1.1 headers={"content-type": "application/json", "authorization": Sensitive, "x-splunk-request-channel": "c7bfe3f7-003d-464e-a2de-1228f0e374d9", "accept-encoding": "gzip", "user-agent": "Vector/0.31.0 (x86_64-unknown-linux-gnu 0f13b22 2023-07-06 13:52:34.591204470)"} body=[519200 bytes] | |
| 2024-04-18T16:42:14.601831Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=11}:http: hyper::client::pool: take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| 2024-04-18T16:42:14.601850Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=11}:http: hyper::client::pool: reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.601882Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=2 | |
| 2024-04-18T16:42:14.601904Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=6}: vector_core::stream::driver: Service call succeeded. request_id=6 | |
| 2024-04-18T16:42:14.664236Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=11}:http: hyper::client::pool: put; add idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.664260Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=11}:http: hyper::client::pool: pooling idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| 2024-04-18T16:42:14.664291Z DEBUG sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=11}:http: vector::internal_events::http_client: HTTP response. status=200 OK version=HTTP/1.1 headers={"content-type": "application/json; charset=UTF-8", "date": "Thu, 18 Apr 2024 16:42:14 GMT", "server": "Splunkd", "vary": "Authorization", "x-content-type-options": "nosniff", "x-frame-options": "SAMEORIGIN", "content-length": "37", "connection": "keep-alive"} body=[37 bytes] | |
| 2024-04-18T16:42:14.664333Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=11}: vector::internal_events::common: Bytes sent. byte_size=519200 protocol=https endpoint=https://http-inputs-redactedp.splunkcloud.com/services/collector/event | |
| 2024-04-18T16:42:14.664390Z DEBUG vector::sinks::splunk_hec::common::acknowledgements: Stored ack id. ack_id=1 | |
| 2024-04-18T16:42:14.664421Z TRACE sink{component_kind="sink" component_id=splunk component_type=splunk_hec_logs component_name=splunk}:request{request_id=7}: vector_core::stream::driver: Service call succeeded. request_id=7 | |
| reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) | |
| take? ("https", http-inputs-redactedp.splunkcloud.com): expiration = Some(90s) | |
| reuse idle connection for ("https", http-inputs-redactedp.splunkcloud.com) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment