All Apps and Add-ons

Log collect status monitoring and

aojie654
Path Finder

Hi, splunkers:

My customer want to monitoring the following 2 things:
1. The status of logs collection. Thats means they wan to ensure that all logs were indexed to splunk.
2. The status of splunk. Send the splunk web message (like the message in the image) to their centralized monitoring platform them in real time if there are any warn or error occured because they almost don't care about splunk monitoring console.

alt text

Any idea for these?

0 Karma

anmolpatel
Builder

@aojie654 If you want to look at log collection and the data indexed, the LM has the capability and you can just extract that search and modify it to meet client requirement. Maybe create another dashboard out of it

For status, Splunk writes quite a few logs about itself
https://docs.splunk.com/Documentation/Splunk/8.0.2/Troubleshooting/WhatSplunklogsaboutitself

Decide which is important to the client and you can write an outputs.conf stanza to send the log to an external source
https://docs.splunk.com/Documentation/Splunk/8.0.2/Forwarding/Forwarddatatothird-partysystemsd

Hope this helps

0 Karma

aojie654
Path Finder

Hello? Is anybody here?

0 Karma
Get Updates on the Splunk Community!

New Cloud Intrusion Detection System Add-on for Splunk

In July 2022 Splunk released the Cloud IDS add-on which expanded Splunk capabilities in security and data ...

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...