Getting Data In

Why am I getting error "Couldn't establish REST service for SplunkRestAppender named 'splunkrest'" trying to integrate Splunk with log4j?

esudharaka
New Member

I am trying to run Example logging in https://github.com/damiendallimore/SplunkJavaLogging with log4j configurations. When i try write logs in to splunk using REST API I am getting following error.

log4j:ERROR Couldn't establish REST service for SplunkRestAppender named "splunkrest".

I cant find a way to setup this service end point in splunk setup. What might be the issue ?

Tags (4)
0 Karma

fross_splunk
Splunk Employee
Splunk Employee

The HTTP receivers don't appear in the input configuration. They're just REST endpoints that any logged in REST session can send data to. They are also the least performant of Splunk's inputs, and you should avoid them if you have other options. You will be much better served by writing to a file and monitoring it with a universal forwarder, or writing directly to a TCP or UDP input.

Your best bet is to email Damien Dallimore, who wrote the code, directly.

Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...