Monitoring Splunk

Has anyone monitored couchbase logs using Splunk?

lpolo
Motivator

Has anyone monitored couchbase logs using Splunk?

http://docs.couchbase.com/couchbase-manual-2.2/#logs-and-logging

Could you share your experience?

Thanks,
Lp

Tags (2)
0 Karma

dodilp
New Member

Hi @mleenxa, @Lpolo

Appreciate if you can please share your experiences of using Splunk with Couchbase.

Thanks,
Don Pinto
Couchbase Server Product Manager
don (at) couchbase (dot) com

0 Karma

lpolo
Motivator

I took the following approach:

1) Monitor using splunk only the error log file.
2) Created a custom splunk search command to obtain couchbase cluster and node information. The custom search command is scheduled to obtain the state of the cluster every 5 min. Depending on the state of the cluster, we trigger notification alerts.

Lp

varsha006
Engager

Kindly share the search command to obtain couchbase cluster and node information

0 Karma

mleenxa
Engager

I'm using couchbase 3.0.1. The inputs.conf looks like this:

[monitor:///opt/couchbase/var/lib/couchbase/logs/babysitter.log]
index = couchbase
sourcetype = server:babysitter-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/couchdb.log]
index = couchbase
sourcetype = server:couchdb-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/debug.log]
index = couchbase
sourcetype = server:debug-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/error.log]
index = couchbase
sourcetype = server:error-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/http_access.log]
index = couchbase
sourcetype = server:http_access-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/info.log]
index = couchbase
sourcetype = server:info-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/mapreduce_errors.log]
index = couchbase
sourcetype = server:mapreduce_errors-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/reports.log]
index = couchbase
sourcetype = server:reports-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/ssl_proxy.log]
index = couchbase
sourcetype = server:ssl_proxy-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/start.log]
index = couchbase
sourcetype = server:start-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/stats.log]
index = couchbase
sourcetype = server:stats-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/views.log]
index = couchbase
sourcetype = server:views-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/xdcr_errors.log]
index = couchbase
sourcetype = server:xdcr_errors-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/xdcr.log]
index = couchbase
sourcetype = server:xdcr-log
[monitor:///opt/couchbase/var/lib/couchbase/logs/xdcr_trace.log]
index = couchbase
sourcetype = server:xdcr_trace-log

Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...