Splunk connector

Lab events are queued here and delivered to your own collector by a small service you run on your network. It polls outbound, so nothing has to be opened in your firewall, and it never holds a database credential. An accepted event means the collector took it — not that it is searchable, and not that anything detected it.