Getting Data In

Configuring Inputs.CONF to Index Logs from HTTP Location

ezajac
Path Finder

I haven’t set this type of input before. I have logs available over http from a URL like below. The typical user views the log in their browser. What is the easiest way to configure my inputs.conf file Index and Different Sourcetypes.

http://servername/sta4j_logs/JVMName/ServiceName.log

Tags (1)
0 Karma

Ayn
Legend

You need to setup a scripted input for this, and of course a script that handles fetching the logs. http://splunk-base.splunk.com/answers/64748/how-to-feed-bunch-of-files-from-the-internet-itself-into...

Get Updates on the Splunk Community!

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...

Updated Team Landing Page in Splunk Observability

We’re making some changes to the team landing page in Splunk Observability, based on your feedback. The ...

New! Splunk Observability Search Enhancements for Splunk APM Services/Traces and ...

Regardless of where you are in Splunk Observability, you can search for relevant APM targets including service ...