Splunk Enterprise

Spunk logging properties file

esmeemarch
Observer

I am trying to integrate splunk into my project.

Currently, I have the following .properties file:

 

mySplunk.level = INFO
mySplunk.handlers = com.splunk.logging.HttpEventCollectorLoggingHandler

# Configure the com.splunk.logging.HttpEventCollectorLoggingHandler
com.splunk.logging.HttpEventCollectorLoggingHandler.url = myUrl
com.splunk.logging.HttpEventCollectorLoggingHandler.level = INFO
com.splunk.logging.HttpEventCollectorLoggingHandler.token = myToken
com.splunk.logging.HttpEventCollectorLoggingHandler.source= mySource
com.splunk.logging.HttpEventCollectorLoggingHandler.disableCertificateValidation=true

 

 

Note: url and token are not put into this file but are available and the access is grated.

My SplunkTestLogger.java

 

import java.util.logging.Logger;
import java.util.logging.Level;

public class Main {

public static void main(String[] args) {
Logger logger = Logger.getLogger("mySplunk");
try{
FileInputStream fis = new FileInputStream("C\\User\\myUser\\logging.properties");
LogManager.getLogManager().readConfiguration(fis);

log.setLevel(LEVEL.INFO);
log.addHandler(new java.util.logging.consoleHandler());
log.setUseParentHandlers(false);

log.info("starting myApp");
fis.close();

} catch (Exception e) {
logger.log(Level.SEVERE, "Exception occurred", e);
}
}
}

 

This class is not able to send any log messages to splunk. Why?
I already tried to connect and send events manually with

 

URL url = new URL(SPLUNK_HEC_URL + "/services/collector/event");
HttpURLConnection connection = (HttpURLConnection) url.openConnection();
connection.setRequestMethod("POST");
connection.setRequestProperty("Authorization", "Splunk " + SPLUNK_HEC_TOKEN);
connection.setDoOutput(true);
//....

 

and it was successful. but I want to make it work with the .properties approach.

Tags (2)
0 Karma

dural_yyz
Motivator

That level of JAVA support typically is beyond the Splunk community board.  These answer posts tend to focus on Splunk configurations.

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...