greptimedb/servers/http/splunk/fn.handle_raw.html

<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><meta name="generator" content="rustdoc"><meta name="description" content="`POST /services/collector/raw` (+ `/raw/1.0` alias). By default, the whole body is raw text stored verbatim as ONE event in the `RAW_MESSAGE_COLUMN` — multiline payloads (e.g. stack traces) are preserved intact. Explicit framing is opt-in via `?linebreaker=` (see `split_raw_body`). Metadata comes from query params and applies to every event. `channel` (param or `x-splunk-request-channel` header) is accepted but ignored until indexer acknowledgment lands;"><title>handle_raw in servers::http::splunk - Rust</title><script>if(window.location.protocol!=="file:")document.head.insertAdjacentHTML("beforeend","SourceSerif4-Regular-6b053e98.ttf.woff2,FiraSans-Italic-81dc35de.woff2,FiraSans-Regular-0fe48ade.woff2,FiraSans-MediumItalic-ccf7e434.woff2,FiraSans-Medium-e1aa3f0a.woff2,SourceCodePro-Regular-8badfe75.ttf.woff2,SourceCodePro-Semibold-aa29a496.ttf.woff2".split(",").map(f=>`<link rel="preload" as="font" type="font/woff2"href="../../../static.files/${f}">`).join(""))</script><link rel="stylesheet" href="../../../static.files/normalize-9960930a.css"><link rel="stylesheet" href="../../../static.files/rustdoc-1ed95124.css"><meta name="rustdoc-vars" data-root-path="../../../" data-static-root-path="../../../static.files/" data-current-crate="servers" data-themes="" data-resource-suffix="" data-rustdoc-version="1.98.1 (48a229cea 2026-09-01)" data-channel="1.98.1" data-search-js="search-9944d736.js" data-stringdex-js="stringdex-2da4960a.js" data-settings-js="settings-170eb4bf.js" ><script src="../../../static.files/storage-41dd4d93.js"></script><script defer src="sidebar-items.js"></script><script defer src="../../../static.files/main-417ebf0a.js"></script><noscript><link rel="stylesheet" href="../../../static.files/noscript-f7c3ffd8.css"></noscript><link rel="alternate icon" type="image/png" href="../../../static.files/favicon-32x32-eab170b8.png"><link rel="icon" type="image/svg+xml" href="../../../static.files/favicon-044be391.svg"></head><body class="rustdoc fn"><a class="skip-main-content" href="#main-content">Skip to main content</a><!--[if lte IE 11]><div class="warning">This old browser is unsupported and will most likely display funky things.</div><![endif]--><rustdoc-topbar><h2><a href="#">handle_raw</a></h2></rustdoc-topbar><nav class="sidebar"><div class="sidebar-crate"><h2><a href="../../../servers/index.html">servers</a><span class="version">1.4.0-alpha.0</span></h2></div><div class="sidebar-elems"><div id="rustdoc-modnav"><h2><a href="index.html">In servers::<wbr>http::<wbr>splunk</a></h2></div></div></nav><div class="sidebar-resizer" title="Drag to resize sidebar"></div><main><div class="width-limiter"><section id="main-content" class="content" tabindex="-1"><div class="main-heading"><div class="rustdoc-breadcrumbs"><a href="../../index.html">servers</a>::<wbr><a href="../index.html">http</a>::<wbr><a href="index.html">splunk</a></div><h1>Function <span class="fn">handle_<wbr>raw</span>&nbsp;<button id="copy-path" title="Copy item path to clipboard">Copy item path</button></h1><rustdoc-toolbar></rustdoc-toolbar><span class="sub-heading"><a class="src" href="../../../src/servers/http/splunk.rs.html#455-529">Source</a> </span></div><pre class="rust item-decl"><code>pub async fn handle_raw(
    __arg0: State&lt;<a class="struct" href="../event/struct.LogState.html" title="struct servers::http::event::LogState">LogState</a>&gt;,
    __arg1: Query&lt;<a class="struct" href="struct.SplunkRawQueryParams.html" title="struct servers::http::splunk::SplunkRawQueryParams">SplunkRawQueryParams</a>&gt;,
    __arg2: Extension&lt;QueryContext&gt;,
    headers: HeaderMap,
    payload: Bytes,
) -&gt; impl IntoResponse</code></pre><details class="toggle top-doc" open><summary class="hideme"><span>Expand description</span></summary><div class="docblock"><p><code>POST /services/collector/raw</code> (+ <code>/raw/1.0</code> alias). By default, the whole body is
raw text stored verbatim as ONE event in the <a href="constant.RAW_MESSAGE_COLUMN.html" title="constant servers::http::splunk::RAW_MESSAGE_COLUMN"><code>RAW_MESSAGE_COLUMN</code></a> — multiline
payloads (e.g. stack traces) are preserved intact. Explicit framing is opt-in
via <code>?linebreaker=</code> (see <a href="fn.split_raw_body.html" title="fn servers::http::splunk::split_raw_body"><code>split_raw_body</code></a>). Metadata comes from query params
and applies to every event. <code>channel</code> (param or <code>x-splunk-request-channel</code> header)
is accepted but ignored until indexer acknowledgment lands;</p>
</div></details></section></div></main></body></html>