Hi Team,
Trying to forward AEM logs from AEM Splunk to our own Splunk with below code
.config
dev
LogForwarding.yaml
The below code failing in pipeline job
Error in config kind 'LogForwarding': credentials audit job failed for splunk: Error: splunk audit failed: while posting on server: Post "splunk.com:8088/services/collector/event": dial tcp: lookup splunk.com on no such host | [credential audit failed] |
kind: "LogForwarding"
version: "1"
metadata:
envTypes: ["dev"]
data:
splunk:
default:
enabled: true
host: "splunk.com"
port: "8088"
token: "${{SPLUNK_TOKEN}}"
index: "aem_index"
sourcetype:
- aemaccess
- aemerror
- aemrequest
- aemdispatcher
- aemhttpdaccess
- aemhttpderror
- aemcdn
event:
level: "INFO1"
msg: "[FelixLogListener] Test SPLUNK"
aem_program_id: 1111
aem_tier: author
aem_env_id: 11111
splunk_customer: "true"
aem_env_type: "dev"
Kindly suggest .
How frequent logs will be forward to my own Splunk(its real time or some cron job)
