How do I analyze AWS ECS container logs with Splunk?

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
import * as awsx from "@pulumi/awsx";

// Create an ECS cluster
const cluster = new aws.ecs.Cluster("ecs-cluster");

// Create a CloudWatch Log Group
const logGroup = new aws.cloudwatch.LogGroup("ecs-log-group", {
    retentionInDays: 7,
});

// Define the Splunk HEC endpoint and token
const splunkHECEndpoint = "https://splunk-hec-endpoint:8088";
const splunkHECToken = "your-splunk-hec-token";

// Create a Task Definition with Splunk logging configuration
const taskDefinition = new aws.ecs.TaskDefinition("task", {
    family: "ecs-task-family",
    containerDefinitions: JSON.stringify([{
        name: "app",
        image: "nginx",
        memory: 512,
        cpu: 256,
        logConfiguration: {
            logDriver: "splunk",
            options: {
                "splunk-token": splunkHECToken,
                "splunk-url": splunkHECEndpoint,
                "splunk-insecureskipverify": "true",
                "splunk-format": "json",
                "splunk-source": "ecs",
                "splunk-index": "main",
            },
        },
    }]),
    requiresCompatibilities: ["FARGATE"],
    networkMode: "awsvpc",
    cpu: "256",
    memory: "512",
    executionRoleArn: new aws.iam.Role("ecsTaskExecutionRole", {
        assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({ Service: "ecs-tasks.amazonaws.com" }),
    }).arn,
    taskRoleArn: new aws.iam.Role("ecsTaskRole", {
        assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({ Service: "ecs-tasks.amazonaws.com" }),
    }).arn,
});

// Create an ECS service to run the task
const service = new aws.ecs.Service("ecs-service", {
    cluster: cluster.arn,
    taskDefinition: taskDefinition.arn,
    desiredCount: 1,
    launchType: "FARGATE",
    networkConfiguration: {
        subnets: ["subnet-12345678"],
        assignPublicIp: true,
    },
});