Feature REQ: Support for HEC raw endpoint

[lilgreenwein]

Starting in version 6.4, Splunk has added a raw endpoint for HEC.

Reference:

http://dev.splunk.com/view/event-collector/SP-CAAAE8Y

Having this available in the kafka-connect-splunk connector would enable users to easier consume and sink unstructured data

[jcustenborder]

@lilgreenwein What were you thinking here. A source connector for receiving data and writing it to Kafka or a sink connector to write to Splunk? This functionality seems to make the most sense for receiving data.

[lilgreenwein]

Likely mostly as a source connector. There are some HEC logging drivers starting to appear that address this raw endpoint /services/collector/event/raw directly, rather than the standard /services/collector/event