Sign inSign up

asauerwein/splunk-mqtt

By asauerwein

•Updated over 2 years ago

https://github.com/aSauerwein/splunk-mqtt

Image
0

10K+

asauerwein/splunk-mqtt repository overview

⁠splunk-mqtt

SPLUNK-MQTT is a simple go binary used to connect to a MQTT broker and stream Messages directly into Splunk HEC

⁠Features

  • subscribe multiple topics at mqtt broker
  • send events to Splunk HEC
  • output received messages to console
  • use tls to connect to mqtt broker
  • caching

⁠config

splunk-mqtt tries to open config.yaml in the current working directory. environment variables take precedence over config.yaml variables

⁠yaml example
---
broker: tcp://192.168.1.1:1883
mqtt_username: splunk
mqtt_password: abcde12345
hec_url : https://hec.splunk.com
hec_token: xxxxxxx-xxxx-xxxx-xxxx-073155c4c54e
client_id: mqtt_subscribe
write_to_console: true
write_to_splunk: true
topics:
  - tele/+/SENSOR
  - tele/some/SENSOR
insecure_skip_verify: false
⁠environment example
export BROKER=tcp://192.168.1.1:1883
export HEC_URL=https://hec.splunk.com
export HEC_TOKEN=xxxxxxx-xxxx-xxxx-xxxx-073155c4c54e
export MQTT_USERNAME=splunk
export MQTT_PASSWORD=abcde12345
export CLIENT_ID=mqtt_subscribe
export WRITE_TO_CONSOLE=true
export WRITE_TO_SPLUNK=true
export TOPICS=tele/+/SENSOR,tele/some/SENSOR
export INSECURE_SKIP_VERIFY=false

⁠run

$ ./splunk-mqtt
MQTT Broker:  tcp://192.168.1.1:1883
MQTT Username:  
Splunk HEC URL:  https://hec.splunk.com
Connection is up
connection established
subscribed to:  tele/+/SENSOR
subscribed to:  tele/some/SENSOR

⁠run docker

docker run \
-e BROKER=tcp://192.168.1.1:1883 \
-e HEC_URL=https://hec.splunk.com \
-e HEC_TOKEN=xxxxxxx-xxxx-xxxx-xxxx-073155c4c54e \
-e TOPICS=tele/+/SENSOR,tele/some/SENSOR \
-e WRITE_TO_CONSOLE=true \
-e WRITE_TO_SPLUNK=true \
splunk-mqtt

⁠Licenses of dependencies

Tag summary

Content type

Image

Digest

sha256:9420797cc…

Size

8 MB

Last updated

over 3 years ago

docker pull asauerwein/splunk-mqtt