Is it possible to use the HTTP Event Collector with Morgan?

[tper1992]

In my Node.js(Express) Application I use Morgan as the logging library. Can we pass the logs to an Splunk Enterprise server using a HEC?

[tper1992]

Thanks.

Those documentation does not contain anything related to Morgan. But we can easily create a Splunk Logger object and pass it as the output for the Morgan.

var MorganLogger = morgan({
  "format": "dev",
  "stream": {
    write: function(message) {
      var payload = {
        message
      };
      SplunkLogger.send(payload); }
  }
});

const app: express.Application = express();
+app.use(MorganLogger);

[esix_splunk]

Morgan should have the ability to pass token to a http endpoint based on the documentation Ive read.

Check out the HEC docs if you havent: http://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector . Additionally, check out the HEC docs on dev : http://dev.splunk.com/view/event-collector/SP-CAAAE6M

Let us know your results!