diff --git a/README.md b/README.md
index cf34039..7ca7288 100644
--- a/README.md
+++ b/README.md
@@ -22,16 +22,6 @@ This plugin interfaces with the Splunk HTTP Event Collector:
check_index false
source {TAG}
sourcetype fluent
-
- # TIMESTAMP: key1="value1" key2="value2" ...
- time_format unixtime
- format kvp
-
- # Memory buffer with a short flush internal.
- buffer_type memory
- buffer_queue_limit 16
- buffer_chunk_limit 8m
- flush_interval 2s
## Installation
@@ -99,31 +89,6 @@ Put the following lines to your fluent.conf:
# default: fluent
sourcetype fluent
- #
- # Formatting Parameters
- #
-
- # time_format: the time format of each event
- # value: none, unixtime, localtime, or any time format string
- # default: localtime
- time_format localtime
-
- # format: the text format of each event
- # value: json, kvp, or text
- # default: json
- #
- # input = {"x":1, "y":"xyz", "message":"Hello, world!"}
- #
- # 'json' is JSON encoding:
- # {"x":1,"y":"xyz","message":"Hello, world!"}
- #
- # 'kvp' is "key=value" pairs, which is automatically detected as fields by Splunk:
- # x="1" y="xyz" message="Hello, world!"
- #
- # 'text' outputs the value of "message" as is, with "key=value" pairs for others:
- # [x="1" y="xyz"] Hello, world!
- format json
-
#
# Buffering Parameters
#
@@ -169,32 +134,23 @@ Put the following lines to your fluent.conf:
# fluent logs in text format
type splunk-http-eventcollector
- protocol rest
server splunk.example.com:8089
- auth admin:pass
sourcetype fluentd
- format text
# log files in text format without timestamp
type splunk-http-eventcollector
- protocol rest
server splunk.example.com:8089
- auth admin:pass
sourcetype log
time_format none
- format text
# application logs in kvp format
type splunk-http-eventcollector
- protocol rest
server splunk.example.com:8089
- auth admin:pass
sourcetype app
- format kvp
## Contributing