json

Author: vdesabou

connect/connect-splunk-sink/splunk-sink.sh

@@ -20,9 +20,10 @@ log "Splunk UI is accessible at http://127.0.0.1:8000 (admin/password)"
 # docker exec splunk bash -c 'sudo /opt/splunk/bin/splunk restart'
 # sleep 60
 
-log "Create topic splunk-qs"
-docker exec broker kafka-topics --create --topic splunk-qs --partitions 10 --replication-factor 1 --bootstrap-server broker:9092
-
+log "Sending messages to topic splunk-qs"
+playground topic produce -t splunk-qs --nb-messages 3 << 'EOF'
+{"store":{"book":[{"category":"reference", "sold": false,"author":"Nigel Rees","title":"Sayings of the Century","price":8.95},{"category":"fiction","author":"Evelyn Waugh","title":"Sword of Honour","price":12.99},{"category":"fiction","author":"J. R. R. Tolkien","title":"The Lord of the Rings","act": null, "isbn":"0-395-19395-8","price":22.99}],"bicycle":{"color":"red","price":19.95}}}
+EOF
 
 log "Creating Splunk sink connector"
 playground connector create-or-update --connector splunk-sink  << EOF
@@ -34,19 +35,15 @@ playground connector create-or-update --connector splunk-sink  << EOF
      "splunk.hec.uri": "http://splunk:8088",
      "splunk.hec.token": "99582090-3ac3-4db1-9487-e17b17a05081",
      "splunk.sourcetypes": "my_sourcetype",
-     "value.converter": "org.apache.kafka.connect.storage.StringConverter"
+     "value.converter":"org.apache.kafka.connect.json.JsonConverter",
+     "value.converter.schemas.enable":"false"
 }
 EOF
 
-log "Sending messages to topic splunk-qs"
-playground topic produce -t splunk-qs --nb-messages 3 << 'EOF'
-This is a test with Splunk %g
-EOF
-
 log "Sleeping 60 seconds"
 sleep 60
 
 log "Verify data is in splunk"
 docker exec splunk bash -c 'sudo /opt/splunk/bin/splunk search "source=\"http:splunk_hec_token\"" -auth "admin:password"' > /tmp/result.log  2>&1
 cat /tmp/result.log
-grep "This is a test with Splunk" /tmp/result.log
+grep "Sword of Honour" /tmp/result.log