sqs-to-hec

Project Home: https://github.com/djschaap/sqs-to-hec

Docker Hub: https://cloud.docker.com/repository/docker/djschaap/sqs-to-hec

Overview

sqs-to-hec reads messages from an AWS SQS queue and submits them to Splunk HTTP Event Collector (HEC).

Build/Release

Prepare Release / Compile Locally

go fmt cmd/cli/main.go
go fmt pkg/receivesqs/receivesqs.go
go fmt pkg/sendhec/sendhec.go
go mod tidy
go test ./...
# commit any changes
BUILD_DT=`date +%FT%T%z`
COMMIT_HASH=`git rev-parse --short HEAD`
FULL_COMMIT=`git log -1`
VER=0.0.0
go build -ldflags \
  "-X main.build_dt=${BUILD_DT} -X main.commit=${COMMIT_HASH} -X main.version=${VER}" \
  -o cli cmd/cli/main.go

Build Container (Manually)

docker build -t sqs-to-hec .

Run Container

export AWS_REGION=us-east-1
export AWS_ACCESS_KEY_ID=...
export AWS_SECRET_ACCESS_KEY=...
docker run -d \
  -e AWS_ACCESS_KEY_ID -e AWS_REGION -e AWS_SECRET_ACCESS_KEY \
  -e SRC_QUEUE=https://sqs.us-east-1.amazonaws.com/ACCOUNT/QUEUE_NAME \
  -e HEC_URL=https://splunk.example.com:8088 \
  -e HEC_TOKEN=00000000-0000-0000-0000-000000000000 \
  sqs-to-hec