topic Re: Want to integrate Splunk with Heroku in Splunk Search

How to integrate Splunk with Heroku?

nikita29 — Mon, 13 Mar 2023 13:51:20 GMT

Hi,

I want to use Splunk for logs for Heroku apps. How to integrate Splunk with Heroku. Can you please help me with implementation.

Re: Want to integrate Splunk with Heroku

batabay — Mon, 13 Mar 2023 07:00:48 GMT

Hi,

Create a Splunk account if you don't have one already.
Login to Splunk and go to the "Add Data" page by clicking on the "Add Data" button in the main menu.
Select "HTTP Event Collector" as the data source.
Create a new HTTP Event Collector token by clicking on the "New Token" button.
Give a name to the token and click on the "Create" button.
Copy the token value and save it for later use.
In your Heroku dashboard, go to the app you want to monitor.
Add the Splunk Add-on to the app by running the following command in your terminal:

$ heroku addons:create splunk $ heroku addons:open splunk

This will open the Splunk Add-on configuration page in your browser. Enter the token value in the "HEC Token" field and click on "Save".

Once the Splunk Add-on is configured, you can start sending logs to Splunk by adding the following configuration to your app's log drain:

Splunk Cloud $ heroku drains:add https://input-output.cloud.splunk.com:443/inputs/http/<HEC Token> Splunk $ heroku drains:add https://splunk.yourdomain.com:443/inputs/http/<HEC Token>

Or you can send syslog.

https://www.splunk.com/en_us/blog/tips-and-tricks/splunking-heroku.html?locale=en_us

Re: Want to integrate Splunk with Heroku

nikita29 — Mon, 13 Mar 2023 11:47:02 GMT

Hi,

Thanks for the steps for implementation. I have few questions.

1) Please provide me the link for "Create a Splunk account".

2) In which terminal you are referring for adding Splunk Add-on commands.

Re: Want to integrate Splunk with Heroku

nikita29 — Tue, 14 Mar 2023 06:22:17 GMT

Hi,

I didn't hear from you from long time. Please try to address my query.

Re: Want to integrate Splunk with Heroku

nikita29 — Wed, 15 Mar 2023 07:20:04 GMT

Hi,

Could please try to answer my query.

I have few questions.

1) Please provide me the link for "Create a Splunk account".

2) In which terminal you are referring for adding Splunk Add-on commands.

Re: Want to integrate Splunk with Heroku

nikita29 — Wed, 15 Mar 2023 13:13:40 GMT

Hi,

I could not find "Add Data" option in "Free Splunk" dashboard when i logged in as a user.

Re: Want to integrate Splunk with Heroku

nikita29 — Thu, 23 Mar 2023 04:26:54 GMT

Hi,

This two commands are not working:-

$ heroku addons:create splunk
$ heroku addons:open splunk

Its giving following error while running this 2 commands on terminal:-

"That add-on plan will only available to select users"