如何将神器与splunk集成

Question

我想将神器与splunk集成以查看神器日志。有没有办法做到这一点？

Answer 1

您需要在artifactory实例上安装通用转发器，以便将数据发送回您的splunk索引器。在转发器上，您需要一个输入配置，其中包含类似于下面的内容：

[monitor:///opt/artifactory/logs/access.log]
index = artifactory
sourcetype = artifactory:logs:access

[monitor:///opt/artifactory/logs/artifactory.log]
index = artifactory
sourcetype = artifactory:logs:application