Getting Data In

splunk syslog configuration

bwenge
Explorer

How to monitor apache access log with splunk

Tags (1)
0 Karma

LCM
Contributor

Do following on the UI: Manager » Data inputs » Files & Directories » Add New

  • Monitor a file or directory : < your_path_to_the_file > (eg. /var/logs/apache/apache_access.log)
  • Host field value : < your_servername >
  • Set sourcetype : Manual
  • Source type : < apache_access >
  • Index : default

Save the whole thing, go back to the search app and type: sourcetype=apache_access

Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...