Hi, I have created a new token and index in splunk for my mulesoft project. These are the configurations I have done in mulesoft to get the splunk logs.Despite this I am unable to see any logs in the dashboard when i search like index="indexname". LOG4J2.XML FILE CHANGES <Configuration status="INFO" name="cloudhub" packages="com.mulesoft.ch.logging.appender,com.splunk.logging,org.apache.l ogging.log4j"> <Appenders> <RollingFile "Rolling file details here" </RollingFile> <SplunkHttp name="Splunk" url="localhost url" token="token" index="indexname" batch_size_count="10" disableCertificateValidation="true"> <PatternLayout pattern="%-5p %d [%t] [processor: %X{processorPath}; event: %X{correlationId}] %c: %m%n" /> </SplunkHttp> <Log4J2CloudhubLogAppender name="CloudHub" addressProvider="com.mulesoft.ch.logging.DefaultAggregatorAddressProvider" applicationContext="com.mulesoft.ch.logging.DefaultApplicationContext" appendRetryIntervalMs="${sys:logging.appendRetryInterval}" appendMaxAttempts="${sys:logging.appendMaxAttempts}" batchSendIntervalMs="${sys:logging.batchSendInterval}" batchMaxRecords="${sys:logging.batchMaxRecords}" memBufferMaxSize="${sys:logging.memBufferMaxSize}" journalMaxWriteBatchSize="${sys:logging.journalMaxBatchSize}" journalMaxFileSize="${sys:logging.journalMaxFileSize}" clientMaxPacketSize="${sys:logging.clientMaxPacketSize}" clientConnectTimeoutMs="${sys:logging.clientConnectTimeout}" clientSocketTimeoutMs="${sys:logging.clientSocketTimeout}" serverAddressPollIntervalMs="${sys:logging.serverAddressPollInterval}" serverHeartbeatSendIntervalMs="${sys:logging.serverHeartbeatSendIntervalMs}" statisticsPrintIntervalMs="${sys:logging.statisticsPrintIntervalMs}"> </Log4J2CloudhubLogAppender> </Appenders> <Loggers> <AsyncLogger name="org.mule.service.http" level="WARN" /> <AsyncLogger name="org.mule.extension.http" level="WARN" /> <AsyncLogger name="org.mule.runtime.core.internal.processor.LoggerMessageProcessor" level="INFO" /> <AsyncRoot level="INFO"> <AppenderRef ref="file" /> <AppenderRef ref="Splunk" /> <AppenderRef ref="CloudHub" /> </AsyncRoot> <AsyncLogger name="Splunk.Logger" level="INFO"> <AppenderRef ref="splunk" /> </AsyncLogger> </Loggers> </Configuration> POM.XML FILE CHANGES <repository> <id>splunk-artifactory</id> <name>Splunk Releases</name> <url>https://splunk.jfrog.io/splunk/ext-releases-local</url> </repository> <dependency> <groupId>com.splunk.logging</groupId> <artifactId>splunk-library-javalogging</artifactId> <version>1.7.3</version> </dependency> <dependency> <groupId>org.apache.logging.log4j</groupId> <artifactId>log4j-core</artifactId> <version>2.10.0</version> </dependency> <dependency> <groupId>org.apache.logging.log4j</groupId> <artifactId>log4j-api</artifactId> <version>2.10.0</version> </dependency> Please let me know if i am missing out on any configuration since i believe i am pretty much following what's in the mule website and other articles.
... View more
