Send HTTP logs to Splunk

Use the HTTP Log plugin to send Kong Gateway raw text logs to Splunk.

Note: The following example uses Splunk 9.0.2. If you are using a different version of Splunk, check the Splunk documentation for the appropriate method.

To send raw text, use the /services/collector/raw Splunk endpoint.

Logs are sent as JSON objects. See the log format reference for details.

Prerequisites

  • You have a Splunk authorization token.

Environment variables

  • SPLUNK_AUTH_TOKEN: The Splunk authorization token.

Set up the plugin

Something wrong?

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!