Has anyone monitored couchbase logs using Splunk?

[lpolo]

Has anyone monitored couchbase logs using Splunk?

http://docs.couchbase.com/couchbase-manual-2.2/#logs-and-logging

Could you share your experience?

Thanks,
Lp

[dodilp]

Hi @mleenxa, @Lpolo

Appreciate if you can please share your experiences of using Splunk with Couchbase.

Thanks,
Don Pinto
Couchbase Server Product Manager
don (at) couchbase (dot) com

[lpolo]

I took the following approach:

1) Monitor using splunk only the error log file.
2) Created a custom splunk search command to obtain couchbase cluster and node information. The custom search command is scheduled to obtain the state of the cluster every 5 min. Depending on the state of the cluster, we trigger notification alerts.

Lp

[varsha006]

Kindly share the search command to obtain couchbase cluster and node information

[mleenxa]

I'm using couchbase 3.0.1. The inputs.conf looks like this:

[monitor:///opt/couchbase/var/lib/couchbase/logs/babysitter.log]
index = couchbase
sourcetype = server:babysitter-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/couchdb.log]
index = couchbase
sourcetype = server:couchdb-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/debug.log]
index = couchbase
sourcetype = server:debug-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/error.log]
index = couchbase
sourcetype = server:error-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/http_access.log]
index = couchbase
sourcetype = server:http_access-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/info.log]
index = couchbase
sourcetype = server:info-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/mapreduce_errors.log]
index = couchbase
sourcetype = server:mapreduce_errors-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/reports.log]
index = couchbase
sourcetype = server:reports-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/ssl_proxy.log]
index = couchbase
sourcetype = server:ssl_proxy-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/start.log]
index = couchbase
sourcetype = server:start-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/stats.log]
index = couchbase
sourcetype = server:stats-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/views.log]
index = couchbase
sourcetype = server:views-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/xdcr_errors.log]
index = couchbase
sourcetype = server:xdcr_errors-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/xdcr.log]
index = couchbase
sourcetype = server:xdcr-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/xdcr_trace.log]
index = couchbase
sourcetype = server:xdcr_trace-log