Linkage to code?

[nowakdaw]

Hello All,

Thank you for your help!. I was wondering if anyone knew if splunk has the ability to parse through log4j files and then provide links to the line of code where that error/warning is fired. Provided we supply it a code base.

Thanks

[gkanapathy · Accepted solution]

Natively no. However, Splunk does have a feature called "Field Actions" that allows you to trigger a script that is passed values that are in the event you select in the UI. To make use of this, you would have to ingest the data into Splunk, extract the program/class name and line number from the message (pretty basic regex, if there isn't already something on SplunkBase where someone else has done it), and set up a URL to receive that and open the right file.

[nowakdaw]

Thank you! Your time is appreciated!

[melting]

Workflow actions:
http://docs.splunk.com/Documentation/Splunk/latest/Knowledge/CreateworkflowactionsinSplunkWeb

[nowakdaw]

Thank you very much!, would you happen to know where I can find "Field Actions" I tried to look for it via my own splunk instance as well as through splunk.com and I could not find anything on it. Thanks again.