Splunk Java Logging

3,956 views

Published on

Presentation section from Splunk Live content

Published in: Technology, Education
0 Comments
3 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
3,956
On SlideShare
0
From Embeds
0
Number of Embeds
9
Actions
Shares
0
Downloads
65
Comments
0
Likes
3
Embeds 0
No embeds

No notes for slide

Splunk Java Logging

  1. 1. SplunkJavaLoggingDamien DallimoreDeveloper Evangelist
  2. 2. Copyright©2013,SplunkInc.Background2• Sometimes you can’t deploy a Splunk Forwarder to collect logs,although this is certainly a best practice• Sometimes you have disk constraints for writing logs• Wouldn’t it be nice to send your log events from your code directly toSplunk ?• Sure , Splunk can eat any text logs , but we should be educating ourdevelopers about the value in best practice semantic logging
  3. 3. Copyright©2013,SplunkInc.SplunkJavaLogging3• A logging framework to allow developers to as seamlessly as possibleintegrate Splunk best practice logging semantics into their code• Transport log events to Splunk directly from your code• Custom handler/appender implementations(REST and Raw TCP) forcommon Java logging frameworks .• LogBack• Log4j (Log4j2 coming also)• java.util.logging• Utility classes for formatting log events• Configurable in memory buffer to handle network outages
  4. 4. Copyright©2013,SplunkInc.Developers just log as they are used to42012-08-07 15:54:06:644+1200 name="Failed Login" event_id="someID" app="myapp" user="jane" somefieldname="foobar"BetterA-HA
  5. 5. Copyright©2013,SplunkInc.Logging Framework takes care of the Splunk transport, REST or Raw TCP5
  6. 6. Copyright©2013,SplunkInc.<barf>Typical Java Stacktraces in logs</barf>6
  7. 7. Copyright©2013,SplunkInc.SplunkJavaLogging is your friend7
  8. 8. Copyright©2013,SplunkInc.Java Stacktraces in Splunk8
  9. 9. Demo
  10. 10. Copyright©2013,SplunkInc.Contact me10Email : ddallimore@splunk.comTwitter : @damiendallimoreSkype : damien.dallimoreGithub : damiendallimoreSplunkbase : damiendSlideshare : http://www.slideshare.net/damiendallimoreBlogs : http://blogs.splunk.com/devWeb : http://dev.splunk.com

×