Level 3

Integrate splunk with aemaacs

Forum|Forum|1 year ago
November 21, 2024
2 replies
1486 views

Hello guys I want to integrate splunk with aemaacs. I establishing splunk enterprise edition in VM. can anyone provide the steps i should follow for settingup splunk in vm and integrating it with aemaacs.

EstebanBustamante

Community Advisor and Adobe Champion

Hi,

Please check here the details about log-forwarding for Splunk: https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/developing/log-forwarding#splunk

Also a good resource: https://blog.arborydigital.com/splunk-setup-aem-cloud-service-aemaacs

Hope this helps

Esteban Bustamante

A

AliSyed1Author

Level 3

I have some questions.

1.so do i need 2 ssl certificates? one for HEC endpoint and one for host machine which is a VM.

2. in aem config. should i mention HEC endpoint or host address?

In blog you mentioned it is saying hec endpoint adderess. check here

https://blog.arborydigital.com/splunk-setup-aem-cloud-service-aemaacs#:~:text=Splunk%20HEC%20endpoint%20address%3A%20(i.e.%20https%3A//splunk.myorganization.com) .

but in docs it mentions host address. check here

https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/developing/log-forwarding#splunk:~:text=aemhttpderror-,Splunk,-kind%3A%20%22LogForwarding%22%0Aversion

I am really confused about configuration please help with it. If possible give me steps about setting up the splunk and aem from scrath . I will be real helpful.

Thank you very much.

syed ali.

Tad_Reeves

Adobe Champion

Hey Syed -
On your question on SSL certificates, I should have probably made that clearer in the blog post - because Splunk is listening on two different ports (one for the Splunk HEC and one for Splunk Web) those are two different SSL configurations. They can share the same certificate if you want, but both have to be configured to make it work. And Adobe does prefer that you keep HEC on 443, even though I've seen it if you plead your case nicely, they'll sometimes let you use an alternate port. Let me know if that works, I'll definitely update the article accordingly.

kautuk_sahni

Community Manager

@alisyed1 Did you find the suggestions helpful? Please let us know if you require more information. Otherwise, please mark the answer as correct for posterity. If you've discovered a solution yourself, we would appreciate it if you could share it with the community. Thank you!

Kautuk Sahni

rawvarun

Community Advisor

how we can use environment variable in yaml file?

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded