topic Splunk Addon builder logs in All Apps and Add-ons

Splunk Addon builder logs

new — Tue, 17 Jun 2025 03:59:56 GMT

Hi
I have Created a Splunk Addon builder using Splunk Enterprise version 9.
And i installed in Splunk Cloud now i am facing some issues with addon , how can i check the logs of this addon in splunk cloud?Pls assist.

Re: Splunk Addon builder logs

PrewinThomas — Tue, 17 Jun 2025 04:13:53 GMT

@new

You can start with _internal index,

For eg:

index=_internal sourcetype=*addon* OR source=*ta_* OR source=*addon*

Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

Re: Splunk Addon builder logs

Meett — Tue, 17 Jun 2025 04:21:42 GMT

Hello @new ,

Can you please share the exact issue you are seeing? l.e., what part of add-on is not working ? are you seeing any ERRORs to check ?

Re: Splunk Addon builder logs

new — Tue, 17 Jun 2025 11:31:17 GMT

i tried with above but it is not showing anything

Re: Splunk Addon builder logs

new — Tue, 17 Jun 2025 11:57:57 GMT

@Meett Thanks for responding.
I have created a Addon builder called TA-splunk-webhook-alerts and i have attached it to a alerts So, whenever that alert is triggered it will trigger the addon builder.
this addon builder contains a python script which calls some api to push the alert data.

The above picture shows the some of python script. if you see the there are some log statements in it.
like

helper.log_info("username={}".format(username))

my question is whenever this script is executed where can i find these logs?
i have not done any specific configuration for logging.
helper.log_info is default one.

FYI: I have developed this addon builder using splunk enterprise version 9 and installed in splunk cloud.
in splunk enterprise i am able to find the location of logs($SPLUNK_HOME/var/log/splunk) but not in splunk cloud.
Please assist to find the logs in splunk cloud.

Re: Splunk Addon builder logs

Meett — Thu, 19 Jun 2025 01:43:46 GMT

Hello @new ,

Can you try to directly run search with log file name or an keyword around logs of that custom add-on on Splunk Cloud and check how it goes?

Re: Splunk Addon builder logs

new — Thu, 19 Jun 2025 04:53:06 GMT

what will be the log file name?
As I mentioned i did not do any configuration for logging.
helper.log_info was already present in the default python script.