Hi,
I want to use Splunk for logs for Heroku apps. How to integrate Splunk with Heroku. Can you please help me with implementation.
Hi,
Create a Splunk account if you don't have one already.
Login to Splunk and go to the "Add Data" page by clicking on the "Add Data" button in the main menu.
Select "HTTP Event Collector" as the data source.
Create a new HTTP Event Collector token by clicking on the "New Token" button.
Give a name to the token and click on the "Create" button.
Copy the token value and save it for later use.
In your Heroku dashboard, go to the app you want to monitor.
Add the Splunk Add-on to the app by running the following command in your terminal:
$ heroku addons:create splunk
$ heroku addons:open splunk
This will open the Splunk Add-on configuration page in your browser. Enter the token value in the "HEC Token" field and click on "Save".
Once the Splunk Add-on is configured, you can start sending logs to Splunk by adding the following configuration to your app's log drain:
Splunk Cloud
$ heroku drains:add https://input-output.cloud.splunk.com:443/inputs/http/<HEC Token>
Splunk
$ heroku drains:add https://splunk.yourdomain.com:443/inputs/http/<HEC Token>
Or you can send syslog.
https://www.splunk.com/en_us/blog/tips-and-tricks/splunking-heroku.html?locale=en_us
Hi,
This two commands are not working:-
$ heroku addons:create splunk $ heroku addons:open splunk
Its giving following error while running this 2 commands on terminal:-
"That add-on plan will only available to select users"
Hi,
I could not find "Add Data" option in "Free Splunk" dashboard when i logged in as a user.
Hi,
Could please try to answer my query.
I have few questions.
1) Please provide me the link for "Create a Splunk account".
2) In which terminal you are referring for adding Splunk Add-on commands.
Hi,
Thanks for the steps for implementation. I have few questions.
1) Please provide me the link for "Create a Splunk account".
2) In which terminal you are referring for adding Splunk Add-on commands.
Hi,
I didn't hear from you from long time. Please try to address my query.