> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://mezmo.ferndocs.com/splunk-hec-logs-destination/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://mezmo.ferndocs.com/_mcp/server.

# Splunk HTTP Event Collector

## [Description](https://docs.mezmo.com/docs/splunk-http-event-collector-pipeline-destination#description)

You can send Mezmo Pipeline log data to Splunk.

## [Configuration Options](https://docs.mezmo.com/docs/splunk-http-event-collector-pipeline-destination#configuration-options)

| Option                     | Description                                                                                                                                                               |
| -------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| End-to-End Acknowledgement | Enable this option to receive verification that log data is being received by Splunk.                                                                                     |
| Encoding                   | The encoding to apply to your log data.                                                                                                                                   |
| Compression                | The compression to apply to your log data                                                                                                                                 |
| Endpoint                   | The base URL for your Splunk instance. The Collector path will be inferred from this base URL.                                                                            |
| Token                      | Token to use to authenticate your connection to Splunk                                                                                                                    |
| Verify TLS Certificate     | Enable to verify that the Splunk instance has a valid TLS certificate. This will not establish a secure connection, but can be useful for testing the Splunk destination. |
| Host Field                 | The log data field to use for sending the hostname to Splunk.                                                                                                             |
| Indexed Fields             | The field or fields for Splunk to extract into its index.                                                                                                                 |