Hi @inventsekar, thanks for the reply, I just entered one site. On the other hand I would be pleased to share the error logs but none are showing. I configured logging level on the app as "ERROR" and "DEBUG" but no logs appear when I run: index=_internal source="/opt/splunk/var/log/splunk/python.log" level!=INFO Regards, PB ... View more

Hi as you have SCP in you, you have one additional option. You could use Splunk Edge Processor to get syslog feed in. Of course you need LB before those endpoint to get HA. But probably the easiest way is use SC4S as @gcusello said. You could run it on docker or even k8s if you are familiar with it. r. Ismo ... View more