Getting Data In

Can I splunk ClearCase for source code change monitoring?

maverick
Splunk Employee
Splunk Employee

Wondering if anyone has ever integrated ClearCase with Splunk yet. Does ClearCase provide text logs on disk or maybe an API that can be leveraged via Scripted Inputs to pull in ClearCase change events (or maybe even actual source code) so I can splunk it?

0 Karma

dcroteau
Splunk Employee
Splunk Employee

ClearCase has an abundant CLI (cleartool). This can help you extract version control information. just looking to adhoc search source code? Then GREP is still your best tool....seems silly to index source code into splunk.

http://www.yolinux.com/TUTORIALS/ClearcaseCommands.html

Here is a list of CPAN Mod(s) you could use, but cleartool is what you need

http://cpan.uwinnipeg.ca/dist/ClearCase-Tools

0 Karma

maverick
Splunk Employee
Splunk Employee

Thanks!

Yes you are correct in that if you can get the change control info from cleartool, then there's no need to splunk the source code directly.

However, if I was using Splunk to index app logs from production and I wanted to correlate live error events with the source code in ClearCase in order to figure out who created the module that just publicly stacktraced all over the place and notify them that they need to fix it asap, then I could see where that could be of valid use case.

0 Karma

maverick
Splunk Employee
Splunk Employee

Actually more interested in splunking the source code, if anything.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Updates (ESCU) - New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 3 releases of new content via the Enterprise ...

Thought Leaders are Validating Your Hard Work and Training Rigor

As a Splunk enthusiast and member of the Splunk Community, you are one of thousands who recognize the value of ...

.conf23 Registration is Now Open!

Time to toss the .conf-etti 🎉 —  .conf23 registration is open!   Join us in Las Vegas July 17-20 for ...