All Apps and Add-ons

Splunk and SOAP

splunkit2010
Explorer

Does Splunk consume SOAP ?

Tags (1)
0 Karma

Paolo_Prigione
Builder

Splunk can index SOAP envelopes: they are just plain text. For instance, you could set jboss to trace the soap requests it is serving to file, then collect it with splunk.

You could assign that data a sourcetype which has the props.conf's **KV_MODE=xml** setting to automatically extract the fields at search time. Also, you could use multiple SEDCMD configs to strip the SOAP tags rightaway (unless you like to report on the xmlns you are using the most 🙂

0 Karma

Ayn
Legend

In which way were you thinking?

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...