To view and download local log files created by the Splunk Forwarder, go to URL of the route of the Splunk Forwarder followed by "/monitor". These use SERVICE_AUTH_TOKEN, while the Splunk Forwarder itself uses SPLUNK_AUTH_TOKEN generated by HEC. The idea is to not expose the remote Splunk Server's authorization token to the service clients of the Splunk Forwarder. It's default storage size is 750mb.Ī note on the two different AUTH tokens. The max storage size used for the entire splunk-forwarder will be MAX_FILES * MAX_BYTES_PER_FILE. Whether the pod name should be appended to the local log file name Total number of log files to rotate over. The CA cert of the remote Splunk Server (or proxy to the remote Splunk Server) Password for the /monitor REST endpoint to view and download local logs Username for the /monitor REST endpoint to view and download local logs Only write to local file system when there's an error sending to Splunk. The number of times to retry the Splunk Server Use a remote Splunk Server or just log locally (useful for testing) Log level for local log file, defaults to 'info'ĭirectory path to store local log files - typically local PV mount point, ie. Security token used by the remote Splunk Server (generated by the Splunk HEC) Security token used by services to connect to Splunk Forwarder Splunk Forwarder uses a token to authorize connection from a service IP address of where the service runs, defaults to 'localhost' Splunk Forwarder ConfigurationĪll configuration is done via a user's shell environment variable and read in NodeJS via process.env. Configure the HEC token in the configuration environment variable of the Splunk Forwarder.įor more information, pleast consult the Event Collector component of Splunk.Turn on HTTP Event Collector (HEC) by enabling its endpoint as it is not enabled by default.Splunk Server version 3.2.1 or greater is required. Where XXX is the SERVICE_AUTH_TOKEN environment variable passed to the service. curl -XPOST -H "Authorization: Splunk XXX" -H "Content-Type: application/json" -d '' localhost:5504/log.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |