gravwell/http_ingester repository overview

The Gravwell HTTP Ingester serves as an ingester to feed from webhooks, HTTP callbacks, and any component designed to feed the Splunk HEC ingester. The Gravwell HTTP ingester provides an easy method to ingest when HTTP is required by a data source.

Refer to Gravwell's Docker guide⁠ for information on how to deploy ingester containers.

The Gravwell HTTP Ingester provides a Splunk HEC compatible ingest listener⁠ so that you can just point a data source at Gravwell from any Splunk compatible data source. Full documentation⁠.

Note: Because this is a Linux application, we strongly recommend running under Docker on a Linux host. Performance may suffer on other operating systems. MacOS users cannot access containers directly by IP, because the containers are actually run within a Linux VM. You can either use netcat from within a Docker container (either the same container or a new one), or forward the appropriate ingester ports to the host when launching the Gravwell container