Splunk Enterprise

How do I send logs from Gitlab to Splunk?

sfirdaus
New Member

I need help sending logs to Splunk from GitLab. Could someone help me get started?

Labels (2)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

have you checked this https://splunkbase.splunk.com/app/6848

r. Ismo

0 Karma

sfirdaus
New Member

Yes I already used and configured in splunk, but GitLab logs are not seen yet

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Have you check internal logs that this input is working? Also check from all indexes from all time with source/sourcetype/host. Time by timestamp parsing or index setting could fail, and those could be on your default index or those could have some weird time even in future.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Essentially, you should probably deploy universal forwarders on your gitlab servers to send the logs to your Splunk indexers.

0 Karma

sfirdaus
New Member

Do you have any example of which ones to use?

Tags (1)
0 Karma

sfirdaus
New Member

Do you have any example of which ones to use?

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...