Component(s)

receiver/splunkhec

Is your feature request related to a problem? Please describe.

Some customers send multiple HEC events to Splunk in bulk, using a single HTTP request containing a JSON array of event objects. This is a native capability supported by Splunk’s HTTP Event Collector (HEC) endpoint. The splunkhecreceiver in the otel-col currently does not support this bulk ingestion format. It only supports individual HEC event objects separated by a line, which means customers who already use the array-based format must modify their data pipelines or add pre-processing logic to adapt their existing integrations.

Describe the solution you'd like

Introduce support for json arrays containing hec events as input.

Describe alternatives you've considered

No response

Additional context

No response

Tip

_{React with 👍 to help prioritize this issue. Please use comments to provide useful context, avoiding +1 or me too, to help us triage it. Learn more here.}