Hi
I have Created a Splunk Addon builder using Splunk Enterprise version 9.
And i installed in Splunk Cloud now i am facing some issues with addon , how can i check the logs of this addon in splunk cloud?Pls assist.
i tried with above but it is not showing anything
Hello @new ,
Can you please share the exact issue you are seeing? l.e., what part of add-on is not working ? are you seeing any ERRORs to check ?
@Meett Thanks for responding.
I have created a Addon builder called TA-splunk-webhook-alerts and i have attached it to a alerts So, whenever that alert is triggered it will trigger the addon builder.
this addon builder contains a python script which calls some api to push the alert data.
The above picture shows the some of python script. if you see the there are some log statements in it.
like
helper.log_info("username={}".format(username))
my question is whenever this script is executed where can i find these logs?
i have not done any specific configuration for logging.
helper.log_info is default one.
FYI: I have developed this addon builder using splunk enterprise version 9 and installed in splunk cloud.
in splunk enterprise i am able to find the location of logs($SPLUNK_HOME/var/log/splunk) but not in splunk cloud.
Please assist to find the logs in splunk cloud.
Hello @new ,
Can you try to directly run search with log file name or an keyword around logs of that custom add-on on Splunk Cloud and check how it goes?
what will be the log file name?
As I mentioned i did not do any configuration for logging.
helper.log_info was already present in the default python script.
You can start with _internal index,
For eg:
index=_internal sourcetype=*addon* OR source=*ta_* OR source=*addon*
Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!