Keycloak Splunk Cloud capability

[Alan_Chan]

I want to receive Keycloak logs in the Splunk Cloud platform. I found Keycloak apps in Splunkbase, but they seem to be unavailable in Splunk Cloud. Are there any methods to receive Keycloak logs in Splunk Cloud?

[gcusello]

Hi @Alan_Chan ,

I don't know Keycloak but surely ingestion is done using scripts that use APIs that aren't acceptable on Splunk Cloud.

You have onely one solution: install an on-premise Heavy forwarder connected to Splunk Cloud and on it install and configure the Add-On.

Ciao.

Giuseppe