Integrate splunk with aemaacs

[AliSyed1]

Hello guys I want to integrate splunk with aemaacs. I establishing splunk enterprise edition in VM. can anyone provide the steps i should follow for settingup splunk in vm and integrating it with aemaacs.

[EstebanBustamante]

Hi, 

Please check here the details about log-forwarding for Splunk: https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/dev... 

Also a good resource: https://blog.arborydigital.com/splunk-setup-aem-cloud-service-aemaacs 

Hope this helps

[AliSyed1]

I have some questions.

1.so do i need 2 ssl certificates? one for HEC endpoint and one for host machine which is a VM.

2. in aem config. should i mention HEC endpoint or host address? 

In blog you mentioned it is saying hec endpoint adderess. check here

https://blog.arborydigital.com/splunk-setup-aem-cloud-service-aemaacs#:~:text=Splunk%20HEC%20endpoin... .

but in docs it mentions host address. check here

https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/dev...

I am really confused about configuration please help with it. If possible give me steps about setting up the splunk and aem from scrath . I will be real helpful.

Thank you very much.

syed ali.

[Tad_Reeves]

Hey Syed -
On your question on SSL certificates, I should have probably made that clearer in the blog post - because Splunk is listening on two different ports (one for the Splunk HEC and one for Splunk Web) those are two different SSL configurations.  They can share the same certificate if you want, but both have to be configured to make it work.  And Adobe does prefer that you keep HEC on 443, even though I've seen it if you plead your case nicely, they'll sometimes let you use an alternate port.  Let me know if that works, I'll definitely update the article accordingly.

[AliSyed1]

1.is it ok to not get any domain name or ssl certificate for vm in which my splunk is installed for integration with aemaacs?

2. how to open a ticket with adobe support?

I am totally new with this things . please provide detailed explaination.

Thank you.

[upendarme1]

Adobe suggesting Log forwarding with splunk with below yaml file

kind: "LogForwarding"
version: "1"
metadata:
envTypes: ["dev"]
data:
splunk:
default:
enabled: true
host: "splunk-host.example.com"
token: "${{SPLUNK_TOKEN}}"
index: "aemaacs"

https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/dev...

Kindly suggest why we need to create Configure AEM Logging Services

AEM AS Cloud service suggest with above yaml however that is not working . I am also checking with Adobe

[kautuk_sahni]

@AliSyed1 Did you find the suggestions helpful? Please let us know if you require more information. Otherwise, please mark the answer as correct for posterity. If you've discovered a solution yourself, we would appreciate it if you could share it with the community. Thank you!