Splunk Dev

Python logging in splunk

strive
Influencer

Hi,

I am trying to set file roll over for python.log file, similar to other splunk log files.

I found two links: http://dev.splunk.com/view/splunk-extensions/SP-CAAAEA9 and http://splunk-base.splunk.com/answers/80712/logging-from-python-in-splunk

These links are helpful. I was looking if it is possible to set the configurations in log-local.cfg file. I tried few options, but none worked.

Is it possible to define python logging configurations in log-local.cfg?

Thanks

Strive

Tags (2)
0 Karma
1 Solution

strive
Influencer

I looked into the script /opt/splunk/lib/python2.7/site-packages/splunk/__init__.py

From this it is clear that, we can not set any configurations other than level information in [python] stanza.

View solution in original post

nmistry_splunk
Splunk Employee
Splunk Employee

Unfortunately, in 5.0.x, splunk does not rotate python.log file and is not configurable. You can use a third party log rotation systems, however be careful they do not break Splunk indexing python.log file for its internal index.

0 Karma

strive
Influencer

I looked into the script /opt/splunk/lib/python2.7/site-packages/splunk/__init__.py

From this it is clear that, we can not set any configurations other than level information in [python] stanza.

Get Updates on the Splunk Community!

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...

Developer Spotlight with Guilhem Marchand

From Splunk Engineer to Founder: The Journey Behind TrackMe    After spending over 12 years working full time ...

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...