Dashboards & Visualizations

How to read application log file from remote server in Splunk dashboard

ronak
Path Finder

Setup

  • Splunk 6.2.1
  • Data processing server - Server1 (which is on same network as Splunk servers - indexers and search heads - but physically different server)
  • dashboard that shows the status of various data processes (or jobs) by reading the meta data tables from database instance that retains the state of various data processes (these data processes populate meta data tables in database as they progress from one step to other)
  • These data processes also generate log files (text files) on Server1

Need

On the job record in my dashboard, I also want to provide the functionality such that when NOC person looks at the job record and clicks on a field "see more details", can read the log file content (log file is sitting on Server1 in /data/jobs) in a new browser window

How do I achieve it?

thanks, ronak

0 Karma

muebel
SplunkTrust
SplunkTrust

You could possibly setup a scripted input running through the forwarder on Server1 that leverages some utility to read what you want out of the database, and return the results.

An alternative maybe is to implement Splunk DB Connect : https://apps.splunk.com/app/958/

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...