Our Jenkins is configured to send the below to Splunk and is working fine.
"splunkConfig": {
"enabled": "true",
"events": [
{
"datasource": "Build Event",
"keyname": "Index",
"value": "jenkins"
}
],
"host": "xx.xxx.xx.xxx",
"port": 8088,
"splunkAppUrl": "https://our splunk url/en-US/app/splunk_app_jenkins/",
"token": "whatever"
}
On Splunk side, we see sourcetype is json:jenkins.
We see 5 source, can someone explain what they are and what they do?
Our Splunk folks said these are directories in Jenkins but we are unable to find them.
Thank you.