topic Re: Is it possible to use the HTTP Event Collector with Morgan? in Getting Data In

Is it possible to use the HTTP Event Collector with Morgan?

tper1992 — Wed, 14 Jun 2017 04:51:24 GMT

In my Node.js(Express) Application I use Morgan as the logging library. Can we pass the logs to an Splunk Enterprise server using a HEC?

Re: Is it possible to use the HTTP Event Collector with Morgan?

esix_splunk — Wed, 14 Jun 2017 05:48:43 GMT

Morgan should have the ability to pass token to a http endpoint based on the documentation Ive read.

Check out the HEC docs if you havent: http://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector . Additionally, check out the HEC docs on dev : http://dev.splunk.com/view/event-collector/SP-CAAAE6M

Let us know your results!

Re: Is it possible to use the HTTP Event Collector with Morgan?

tper1992 — Wed, 14 Jun 2017 06:49:37 GMT

Thanks.

Those documentation does not contain anything related to Morgan. But we can easily create a Splunk Logger object and pass it as the output for the Morgan.

var MorganLogger = morgan({
  "format": "dev",
  "stream": {
    write: function(message) {
      var payload = {
        message
      };
      SplunkLogger.send(payload); }
  }
});

const app: express.Application = express();
+app.use(MorganLogger);