Expanso example

Splunk Edge Processing

The problem

Sending every raw edge event to Splunk increases ingestion volume and delays useful normalization until after transfer.

Prepare, filter, and route synthetic edge events to a Splunk HEC boundary.

Next steps

This example needs its named integrations or platform before it can run. Review the prerequisites and replace example endpoints before testing it.

Add the authentication, TLS, storage, network policy, and least-privilege settings required by your target before you deploy this pipeline.