This trading partner exchanges data with a remote Splunk HTTP Event Collector (HEC) deployment. The MFT Server initiates the connection to the remote Splunk deployment that you configure for this trading partner. It is assumed that the administrator of the remote Splunk deployment has provided you with the details needed to set up the trading partner - details such as the system's hostname or IP address, port number and access token.
Adding the Splunk HTTP Event Collector trading partner
In the desired domain, navigate to the AUTOMATION > Trading Partners module. Click on the Add button, or right click anywhere in the grid area and select Add from the pop-up menu. In the Add Trading Partner dialog window, select Splunk HTTP Event Collector as the Protocol, then click OK. The Add "Splunk HTTP Event Collector" Trading Partner dialog will appear as depicted in the figure below.
Figure 494
Basic
Name - The unique name to assign to this trading partner. Enter a name that best describes the trading partner, as you will be selecting the name when using the partner in MFT Server features that support it.
Company - The name of the company that this trading partner represents.
E-mail - The primary email address for this trading partner.
Connection
Host/IP - The hostname or IP address of the remote Splunk service.
Port - The port number of the remote Splunk service.
Timeout - The maximum time (in seconds) for establishing a connection to the remote Splunk service.
Access Token - The access token for the Splunk remote service, used for authentication. This would be generated by the Splunk Administrator, using Splunk's web interface. Click here for Splunk specific information about generating an access token for the Splunk Cloud Platform or Splunk Enterprise deployment
Use SSL - If checked, SSL protection (HTTPS) is enabled for this trading partner connection.
Tags
Tags - If specified, this is the one or more tags that are used to limit which administrators have access to this trading partner.