Getting Data In

Can REST API allow not to install splunk forwarder?

cgladky
Engager

I have a task: investigate possibility not to install universal forwarder and use only java instead.
Can REST API (java sdk) allow to do it?

Tags (2)
0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

Have a look at Splunk Java Logging.

It has a appenders/handlers for log4j, logback and java.util logging, so you can seamlessly integrate it into your Java code for logging to Splunk via REST.

Download it and check out the examples !!

View solution in original post

Damien_Dallimor
Ultra Champion

Have a look at Splunk Java Logging.

It has a appenders/handlers for log4j, logback and java.util logging, so you can seamlessly integrate it into your Java code for logging to Splunk via REST.

Download it and check out the examples !!

cgladky
Engager

It works. thanks.

0 Karma

dart
Splunk Employee
Splunk Employee

You could use log4j to send data to Splunk over TCP, or you could use the REST API to write data to Splunk. See the receivers endpoint documentation

See also the Splunk Java SDK

0 Karma

cgladky
Engager

My try to use TCP fails 😞

0 Karma

Ayn
Legend

Why? UDP should be avoided for data that needs to have guaranteed delivery.

0 Karma

cgladky
Engager

Actually, I send log to splunk over UDP not TCP.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...