Can REST API allow not to install splunk forwarder?

[cgladky]

I have a task: investigate possibility not to install universal forwarder and use only java instead.
Can REST API (java sdk) allow to do it?

[Damien_Dallimor · Accepted solution]

Have a look at Splunk Java Logging.

It has a appenders/handlers for log4j, logback and java.util logging, so you can seamlessly integrate it into your Java code for logging to Splunk via REST.

Download it and check out the examples !!

[cgladky]

It works. thanks.

[dart]

You could use log4j to send data to Splunk over TCP, or you could use the REST API to write data to Splunk. See the receivers endpoint documentation

See also the Splunk Java SDK

[cgladky]

My try to use TCP fails 😞

[Ayn]

Why? UDP should be avoided for data that needs to have guaranteed delivery.

[cgladky]

Actually, I send log to splunk over UDP not TCP.