I am trying to configure an HTTP publisher to send data to a Splunk Cloud instance. The publisher can successfully transmit static test data to Splunk, but live data is not formatted correctly. See the Format events for HTTP Event Collector documentation, under "Event metadata" and "Event parsing". Is it possible to reformat the outgoing data from Mango to match the format that Splunk is expecting?
Same use case. I would like to deploy Mango using Docker. I'm referencing a thread from a couple years ago. An IAS employee shared a script he was using for testing. Has there been any progress, or official support added for Docker since then?