Webmethod to ingest logs to splunk from Caremonitor app from S3 bucket

[tv00638481]

Hi,

We have client looking to ingest logs using webmethod from one of application(caremonitor) logs from S3 bucket. Since we have not been used anytime before fetching logs via webmethod. Could you please let me know  the process to use this method and best practices.

we are current using Splunk cloud platform and the care monitor looks to be cloud base application.

[tv00638481]

Yes, thank you,... we have integrated S3 bucket and from there we are onboarding the logs.

[mattymo · Accepted solution]

Can you clarify what "webmethod" means to you?

Splunk Can ingest logs from S3 in a variety of ways.

We have addons like the AWS TA that can poll the data from s3 using sqs. 
https://docs.splunk.com/Documentation/AddOns/released/AWS/SQS-basedS3

We also  have options like Splunk Cloud Data Manager or AWS Firehose, as well as 3rd party collectors that can pickup s3 then send to splunk over HTTP Event Collector. 

https://docs.splunk.com/Documentation/DM/1.8.2/User/AWSPrerequisites#AWS_S3_data_source_prerequisite...

Hopefully this helps get you pointed in the right direction!

[tv00638481]

Hi,

Have integrate logs to Splunk via S3 SQS successful. Have asked CM team dumps the logs to client S3 bucket from there on , we are pulling them to Splunk.

thank you all your inputs.