There are a few typical ways to get data into Splunk.
1. Use a Universal Forwarder (UF) to pass application logs to Splunk.
2. Have the application write syslog events to a syslog server and use a UF to forward those events to Splunk.
3. Have the application write syslog events to Splunk Connect for Syslog, which will forward them to Splunk.
4. Use Splunk DB Connect to read events from the application's SQL database.
5. Create a script that makes API calls to fetch events from the application. This can be implemented as a Splunk scripted input, a modular input, or a standalone script that writes output to a file which a UF sends to Splunk.
Which one you use depends on the application and the data you wish to ingest.
You should check splunkbase (
https://apps.splunk.com) to see if anyone has done any of this before.
---
If this reply helps you, Karma would be appreciated.