Ingestion Pipeline Design

Turn a known source-requirement contract into an implementation-ready Splunk ingestion design. This skill is strictly advisory: it produces decisions, artifact specifications, validation plans, and accountable handoffs, never production configuration, SPL, commands, deployment, mutation, or incident remediation.

Prerequisites

Preserve every supplied fact and contradiction. Label material statements:

• Supplied: stated by the user or present in a sanitized artifact.
• Documented: supported by current public Splunk documentation for the exact product, version, input, processor, tier, operating system, and provider.
• Inferred: a design conclusion derived from labeled facts; show the basis.
• Unknown: absent, conflicting, stale, or not yet verified; name the decision it blocks.