Installation

How to get logs from an external app on a splunk cloud instance?

NicolásMilans
Explorer

Hello,

I need to get the logs from an external app into my splunk cloud instance ,

where i can get the agent that i need to install at the linux APP server  ?

where is the route where i can find this logs ?

the logs should be in a json format 

 

Thanks a lot , have a good day  

 

Labels (5)
Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The Universal Forwarder ("agent") is available at https://www.splunk.com/en_us/download/universal-forwarder.html.  To send to your Splunk Cloud instance, you'll need to download and install an app on the agent.  You can find the app and instructions in the "Universal Forwarder" app on your cloud instance.

We don't know where the app logs are. You'll have to get that information from whomever is responsible for the app.

---
If this reply helps you, Karma would be appreciated.

NicolásMilans
Explorer

Thanks,

once the agent has been installed on the server of the external app,

How can i get that route in to splunk to get the logs ?

Thanks  

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The Universal Forwarder app you download from your Splunk Cloud search head contains the routing.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...