Splunk source health check URL.

[hlbraddock]

We're configuring https://vector.dev/docs/reference/configuration/sources/splunk_hec source running in a Docker (timberio/vector) container.
We need to identify a health check URL.
Our infrastructure has a limitation that the Docker container (AWS ECS) running vector.dev can only expose one port.
Does https://vector.dev/docs/reference/configuration/sources/splunk_hec provide a no-auth http GET based health check URL?
Does vector.dev running in the Docker container (timberio/vector) provide a no-auth http GET based health check URL accessible via the same port (as Splunk source)?

[jszwedko]

Hi @hlbraddock !

The splunk_hec source exposes a health check at /health or /health/1.0. This endpoint does not require authentication.

[jszwedko]

#12098

[hlbraddock]

I note the test still sends a header, even if invalid.

Is the header itself still required for the health check?

If so, #12098 may not resolve our issues, as ECS doesn't support sending headers with health check URL's.

[jszwedko]

Ah, nah, it doesn't require the header at all. I just added a test for an invalid token, but no header at all would also work. I'll add a separate test for that.

[hlbraddock]

Yahoo! Thanks.

What does your deployment model/schedule look like? When would we expect #12098 made available in say https://hub.docker.com/r/timberio/vector?

[jszwedko]

It will be in the next nightly release (the images tagged with dates), but also in the next stable release (which is targeted for next week).