Getting Data In

Does Splunk have any ability to "pull" data?

larryleeroberts
Path Finder

We use Splunk onprem and we also have Dynatrace SaaS. Dynatrace recently release the ability to access the audit logs via their API. I would really like to get these logs into Splunk. I am trying to figure out of there is anything within Splunk that provides the ability to "pull" these logs.

Has anyone accomplished this?

0 Karma

spostma
New Member

i am using the Splunk REST API App (paid) https://splunkbase.splunk.com/app/1546/
there your able to write your own rest API call and import it into splunk.

0 Karma

larryleeroberts
Path Finder

Thanks! I decided to just use the Splunk Add-On Builder to make my own app to do it. We will see how that goes.

0 Karma

larryleeroberts
Path Finder

FYI... Kinda what I thought. These apps can't read the new audit logs. No option for that with the current version.

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@larryleeroberts
Have you tried these apps ?

Dynatrace Add-on for Splunk (https://splunkbase.splunk.com/app/3969/)
Dynatrace App for Splunk (https://splunkbase.splunk.com/app/4040/)

0 Karma

mydog8it
Builder

The Dynatrace app for Splunk collects via the Dynatrace API:
https://splunkbase.splunk.com/app/4040/

0 Karma

larryleeroberts
Path Finder

I knew it collected metrics, but not the logs. I will give it a try - Thank you! Very much appreciated.

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!