In my Node.js(Express) Application I use Morgan as the logging library. Can we pass the logs to an Splunk Enterprise server using a HEC?
Thanks.
Those documentation does not contain anything related to Morgan. But we can easily create a Splunk Logger object and pass it as the output for the Morgan.
var MorganLogger = morgan({
"format": "dev",
"stream": {
write: function(message) {
var payload = {
message
};
SplunkLogger.send(payload); }
}
});
const app: express.Application = express();
+app.use(MorganLogger);
Morgan should have the ability to pass token to a http endpoint based on the documentation Ive read.
Check out the HEC docs if you havent: http://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector . Additionally, check out the HEC docs on dev : http://dev.splunk.com/view/event-collector/SP-CAAAE6M
Let us know your results!