Splunk Dev

Is there a way to specify index, source fields when using splunk java logging?

juniormint
Communicator

I'm using the splunk java logging appenders. Are there hooks for setting things like source in my app config rather than relying on splunk forwarder config on the receiving end?

Tags (3)
0 Karma

Damien_Dallimor
Ultra Champion

If you use a REST Appender you can set this meta data at the source.

Have you looked at the example configs ?

0 Karma

juniormint
Communicator

I see...thanks again.

0 Karma

Damien_Dallimor
Ultra Champion

Yes. This is explained in the README ( https://github.com/damiendallimore/SplunkJavaLogging/blob/master/README.md ) and shown in the example config in the the link I posted in my previous reply.

0 Karma

juniormint
Communicator

Thanks for your answer Damien.

I'm just looking around...are there rest endpoints for sending data to a forwarder? I had been using a tcp appender sending data to a forwarder on the same host as my app.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...