Reporting

PHP error reporting from page to splunk

websfera
Engager

Is it possible?

Tags (3)
0 Karma

Drainy
Champion

Yes, yes it is entirely within the realms of possibility

websfera
Engager

I'm really tired... Thanks Drainy for your clues. I'll try it tomorrow at work 🙂

0 Karma

Drainy
Champion

and hopefully this is the part where you realise why I posted such a short answer... this is all stuff you need to provide in a question!
So in that case you use a Splunk Universal Forwarder or syslog to forward the logs back to your indexer, from there you have centralised logging and searching for all your data 🙂

websfera
Engager

Yes it is possible,a d I've found it too 🙂 But my splunk is on other server than my sites

0 Karma

Drainy
Champion

Ok, so I just ran a single search on Google for php error log and it appears all PHP errors (if configured) are logged to an error_log file, you could index this within Splunk as you would any other log file

0 Karma

websfera
Engager

Well, have you got any starting point, cause I'm digging about 3 hours and nothing useful found.

0 Karma

websfera
Engager

I'm trying to send error message to splunk.
For example: one developer made change in SQL table structure but didn't informed a code developer to make appropriate changes to SQL query. It will throw error, and this error message is what I want to relay to splunk

0 Karma

piebob
Splunk Employee
Splunk Employee

could you be a bit more specific about what you're trying to do?

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...