Following the instructions from http://docs.splunk.com/Documentation/AddOns/released/Linux/Configure, I set up my config by uncommenting the LoadPlugin write_http, and creating my Node: <Plugin write_http> <Node "burch"> URL "https://<myhost>:8088/services/collector/raw?chann...</myhost></node></plugin>