Getting Data In

How do I index a simple http URL request in Splunk Light?

jedashford
New Member

Our web PHP error and access logs are available only at a simple http URL request. How can I get these into Splunk Light?

0 Karma

FritzWittwer_ol
Contributor

a simple solution could be to use a scripted input with either a wget or curl to grab the logs

0 Karma

jedashford
New Member

'scripted input' being a splunk function? Or a cron curl to a file and point splunk to the log?

0 Karma

FritzWittwer_ol
Contributor

Scripted input is a Splunk feature, the universal forwarder executes a script, which you provide, at defined Intervals and indexes the script output, see http://docs.splunk.com/Documentation/Splunk/6.2.5/AdvancedDev/ScriptedInputsIntro

This allows you to get in any data source which you can access via a script, but you have to be aware of the security implications. The script runs under the identity of the Splunk forwarder, usually either root or splunk. It may have too much or not enough privileges to execute the command. Thus a cron jobs which executes the script and writes the output to a file you index with the Splunk forwarder is sometimes a simpler Solution.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

 Are you ready to revolutionize your IT operations? As digital transformation accelerates, the demand for ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...