Using the StatsD Endpoint type, you can send metric data to a Splunk installation. In Splunk, you can use SSL to secure ports that are open for StatsD. You can configure open UDP or TCP ports in Splunk to accept only connections from a certain hostname or IP address.
StatsD metrics are typically sent over UDP. Using UDP, the client sending metrics does not have to block as it would if using TCP. However, using TCP guarantees order and ensures no metrics are lost.
To securely send UDP or TCP data to Splunk:
- Send the data to a Splunk Universal Forwarder.
- Request that the forwarder use SSL to communicate with the Splunk Indexer.