topic Re: logging in Splunk SOAR in Splunk SOAR

logging in Splunk SOAR

emesabarrameda — Fri, 19 Jan 2024 20:23:18 GMT

Hi,

I am implementing a Splunk SOAR Connector and i was wondering if it is possible to write logs at different levels. There are different levels that can be configured on SystemHealth/Debugging but the BaseConnector only has debug_print and error_print methods. How can I print INFO, WARNING and TRACE logs on my connector?

Thank

Eduardo

Re: logging in Splunk SOAR

phanTom — Mon, 22 Jan 2024 14:05:56 GMT

@emesabarrameda I can't seem to find anything in the docs: https://docs.splunk.com/Documentation/SOARonprem/6.2.0/DevelopApps/AppDevAPIRef

Both options you call out have the tag option which could maybe be used for thee INFO/WARNING/TRACE strings?

Any reason you want to Split into those categories as it all ends up in spawn.log anyway.

Re: logging in Splunk SOAR

emesabarrameda — Mon, 22 Jan 2024 14:40:39 GMT

Hi @phanTom

Thank for your reply.

On my connector, there are some actions that are repeated a lot and having logs on them could flood the logs. I was hopping to add those logs only if customer chose to enable them.

Why is the reason to have different levels of loggings if we cannot decide whether to print them or not?