topic Forwarding Logs in Getting Data In

Forwarding Logs

Aw123 — Thu, 10 Jun 2021 19:30:19 GMT

Hi! I have successfully installed a Splunk forwarder on the EC2 instance which my Python application is living. How do I tell the application what to send to the forwarder. Is there some sort of sys logging that I need to do, will the forwarder pick up all application output (prints, debugs, etc.) or how does that work?

Re: Forwarding Logs

rupkumar4sec — Thu, 10 Jun 2021 19:44:38 GMT

If your application stores logs in a physical location on your EC2 instance you can simply monitor that file/directory.

[monitor:<filepath>]
sourcetype = <sourcetype>
index = <index>
host =

add any other setting you need. Check below document for your reference
https://docs.splunk.com/Documentation/Splunk/8.2.0/Admin/Inputsconf#inputs.conf.spec

Re: Forwarding Logs

Aw123 — Thu, 10 Jun 2021 19:48:29 GMT

Thanks for replying. Currently these logs are forwarding to Splunk cloud, I more or else am confused on how to dictate what exactly is forwarded!

Re: Forwarding Logs

rupkumar4sec — Thu, 10 Jun 2021 22:55:49 GMT

you should be able get that information from using btool command

./splunk btool inputs list --debug

run this command from $SPLUNK_HOME$/bin