node-red-contrib-splunk-hec 0.1.6

Node-RED node for sending events to Splunk HEC

npm install node-red-contrib-splunk-hec

Synopsis

The purpose of this project is to allow node-red to publish a node-red payload to Splunk HEC endpoints.

First Published: 19/03/2026 Latest Version: 0.1.6 as at 28/05/2026

Motivation

Original Node created and published by gdziuba https://github.com/gdziuba/http-event-collector.git

Originally lacked ability to name nodes or the saved configurations. Our organisation uses this extensively and needed a way to distinguish between multiple saved configs. This code has been ammended to include these missing features.

Please see CHANGELOG.md file - New feature added this version - clone existing config

Installation

The easiest way to install is through the Node-Red Palette Manager that can be found in the menu on the top right hand corner of the Node-Red ui.

Manual install with npm

npm install -g node-red-contrib-splunk-hec

Install from source

From github: Navigate to the your home directory on linux is is ~/.node-red/node-modules

git clone https://github.com/IcyWorks/node-red-contrib-splunk-hec.git

cd splunk-hec
npm install

Examples:

Import example flows:

example-flow.json example-flow.json

Setup

To configure Splunk's HTTP Event Collector, follow these instructions.

Node-RED Functions for converting msg to correct structure for Metric Event Collector.

Single value MQTT payload message to Metric structure:

var o = msg.payload;
var v = msg.topic;
msg.payload = {};
msg.payload.fields = {};
msg.payload.fields._value = o;
msg.payload.fields.metric_name= v;
return msg;

Single value with dimensions enabled :

var o = msg.payload;
var v = msg.topic;
msg.payload = {};
msg.payload.splunkdims = true;
msg.payload.fields = {};
msg.payload.fields._value = o;
msg.payload.fields.metric_name= v;
msg.payload.fields.dimension1= "value1";
return msg;