daniel.g/intesa_splunk_main
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
daniel.g 2025-09-28 09:55:37 +00:00
parent b91d6f41fb
commit fa0d76d216
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
README.md
View File

@ -3,7 +3,7 @@
This repo runs a local pipeline that mimics production **end-to-end**, but **without any active Azure dependencies**. This repo runs a local pipeline that mimics production **end-to-end**, but **without any active Azure dependencies**.
All “Azure things” are left as **placeholders** so this same repo can later be deployed to Azure. All “Azure things” are left as **placeholders** so this same repo can later be deployed to Azure.
## What runs locally ## What runs locally (currently)
1. **Splunk** (container) – receives events via HEC. 1. **Splunk** (container) – receives events via HEC.
2. **Poller** (`splunk_poller.py`) – queries Splunk and writes newline-delimited JSON **chunks** to a shared volume. 2. **Poller** (`splunk_poller.py`) – queries Splunk and writes newline-delimited JSON **chunks** to a shared volume.
@ -11,6 +11,10 @@ All “Azure things” are left as **placeholders** so this same repo can later
> Local mode uses `SINK=file` and a shared Docker volume. **No Azure Storage or Queues** are used in this mode. > Local mode uses `SINK=file` and a shared Docker volume. **No Azure Storage or Queues** are used in this mode.
## What runs on Azure (currently)
1. **Queue-worker**
2. **Agent API**
--- ---
## Quick start (TL;DR) ## Quick start (TL;DR)