Skip to main content

 

Splunk Lantern

Getting data into Log Observer

 

Splunk Log Observer is part of Splunk Observability Cloud. To get started with Splunk Observability Cloud, first follow the instructions in the Splunk Docs topic, Set up and administer Splunk Observability Cloud. New users might also be interested in the Splunk Education offerings for Splunk Log Observer.

After getting set up with Splunk Observability Cloud, you must start with getting data in.

Step 1: Collect infrastructure data with an OpenTelemetry Collector 

Observability Cloud supports integrations for Kubernetes, Linux, and Windows. Integrations for these data sources help you deploy a Splunk OpenTelemetry Collector to export metrics from hosts and containers to Observability Cloud.

Step 2: Verify successful data ingestion 

Verify successful ingestion of data by filtering or aggregating the log data available. Performing these basic functions will enable you to drill deeper into the ingested log data to determine whether or not the data was ingested as expected. 

You can do this by selecting the Add Filter button at the top of the search header in the Log Observer UI. Add a filter to the data that you know should be present in the ingested log data in order to verify successful data ingestion.

After you’re satisfied with how the data is ingested and is presented in Log Observer, you have completed this Getting Data In step.