Cookbook

• Stream to Splunk — HEC token, collector endpoint, NDJSON.
• Stream to Elastic — ECS documents over HTTP with a bearer token.
• Stream to Datadog — Logs API v2, API key, site, limits.
• Stream to Amazon S3 — NDJSON objects, least-privilege IAM, access keys or an assumed role, SSE, MinIO/R2.
• Stream to Google Cloud Storage — NDJSON objects, a service-account key with roles/storage.objectCreator.