Splunk

Learn how to send events to Splunk from Couchdrop

Requirements

Required Configuration

To connect to Splunk you will need:

• Event Collector token

• HTTP Event Collector URI

Optional Configuration

You can configure these optional attributes

• Originating Host

• Event Source Application

• Sourcetype value for the event

• Index name

To learn how to setup Splunk API access you can visit https://docs.splunk.com/Documentation/SplunkCloud/latest/Data/UsetheHTTPEventCollector

Configuration Steps

1. Log in to Couchdrop and navigate to the Admin Panel - Logging

2. Select Connect/Manage on the Splunk Provider Pill

3. Select the Events to send to Splunk

4. Configure the required and optional Splunk fields

5. Click Save Updates