Splunk Dev

Running splunk in Google App Engine

gmcfall
Engager

We run parts of our application in Google App Engine (GAE).

Is it possible to forward logs from GAE to a remote Splunk indexer?
If so, how?

Tags (4)

Andreux
Splunk Employee
Splunk Employee

It's quite possible; looking at FirePython, it can see application logs from GAE applications. It places them into the HTTP response headers, allowing a Javascript client application to see logs from the GAE python application.

Though I haven't tried this, you could use a similar approach to send logs to the Splunk REST API data input endpoint /receivers/simple by using the GAE urlfetch API (google.appengine.api.urlfetch).

You may like to look at the FirePython middleware implementation here for more details about how to get at the log data, and the Splunk REST API documentation about how to format your HTTP requests.

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...