Other Data Shippers

If your favorite data shipper is not available, chances are it is still compatible or configurable enough to send data to Humio.

Humio supports the following APIs for data ingestion:

Humio Ingest API

Humio has an Ingest API. You can use this to build an integration with Humio.

ElasticSearch Bulk API

Humio is compatible with the ElasticSearch bulk ingest API.

If you have a log shipper that supports the ElasticSearch Bulk API, there is a good chance that you can use this to send logs to Humio. See the Beats documentation for an example of configuration options.

Contact technical support if you have trouble getting this working, such as getting errors when trying to make a client work against the API.

Graylog Extended Log Format (GELF)

Humio is compatible with the Graylog Extended Log Format (GELF) using UDP or TCP as transport. Refer to Ingest listeners to setup such a listener.

GELF over HTTP is not yet implemented. Please get in touch with us if you need it.

HEC - HTTP Event Collector

Humio is compatible with the HEC - HTTP Event Collector.

If you have a log shipper that supports the ElasticSearch Bulk API, there is a good chance that you can use this to send logs to Humio.

StatsD

The StatsD protocol is a great way of shipping raw metrics to Humio from a lot of tools. Both UDP and TCP transport are supported. Currently, StatsD protocol is only supported in self-hosted installations.

The StatsD format is very simple. In it’s simplest form it looks something like <metricname>:<metricvalue>|<metrictype>.

Start by creating a new parser with the following regex:

(?<metricname>\w+?):(?<metricvalue>[-+]?[\d\.]+?)\|(?<metrictype>\w+?)(\|@(?<metricsampling>[\d\.]+?))?

And no Parse timestamp and Parse key values. Give it a name, like statsd. Next, create an ingest listener with the statsd parser.

We strongly recommend using an UDP ingest listener for non-aggregated StatsD data.