# Splunk

Category: Logging
|
Runtime: 0.9+
|
Available: Free

# Overview

Splunk node by Kumologica integrates seamlessly with Splunk (opens new window) cloud infrastructure. Enabling to send the application log events from Kumologica flow to Splunk logs.

# Setup

# Prerequisites

For Splunk node to work properly, you need to have a valid subscription of Splunk cloud instance running and available to access over https. Ensure to have an HEC token (opens new window) generated for the node to connect with a given instance of Splunk.

# Installation

To install the node from designer:

  1. Go to Add more nodes option on the palette section.
  2. Check for the Splunk node and click install.
  3. Once installed, the designer is required to be restarted.

To install the node from CLI:

  1. Go to your project workspace where you can see your package.json file.
  2. Run the below give npm command.
    npm i @kumologica/kumologica-contrib-splunk

# Technical Details

Properties

  • Host (Required)
    Hostname of the Splunk cloud instance to connect.
  • Port (Required)
    Port number associated with the Splunk cloud instance.
  • Splunk HEC Token (Optional)
    HEC Token key for authenticating with the platform. The node expects the HEC token (opens new window) for authenticating with the platform.
  • Message (Optional)
    Log message to sent.

Supported Operations

Send logs

Throws

Splunk node throws the following exception.

  • SplunkConnectionError
  • SplunkInvalidTokenError
  • SplunkInvalidLogDataError
  • SplunkDataWriteError

Returns

The payload or variable will not be overwritten or enriched by this node.

# Develop a Service

Video tutorial

# Instructions

  1. Drag and drop EventListener node from the pallet to the canvas and open the EvenListener node settings, configure the following and click Save.
Display Name : POST /order
Event Source : Amazon API gateway
Verb : POST
URL : /order
  1. Add Splunk node to the canvas and open the Splunk node settings, configure the following and click Save.
Display Name : Log_Entry
Host : hostname of your Splunk account
Port : 8088
Message : msg.payload
Splunk HEC Token : Splunk HTTP Event collector Token
  1. Wire the EventListener Node to the Splunk Node.

  2. Add EventListener End node from the palette to the canvas. Open the settings, configure the following and Save.

    Payload : msg.payload
    
  3. Wire the Splunk node to the EventListener End node.

# Try it

Sample Flow with Splunk node