Understood, thank you for your reply. I will look into it.
On Saturday, June 30, 2018, 4:29:28 PM EDT, Nick Couchman
<[email protected]> wrote:
On Fri, Jun 29, 2018 at 10:17 AM Tezarin <[email protected]> wrote:
> Hi,
> I would like the Guacamole logs to get forwarded to the Splunk server
> and I added the log forwarding parameters I found on Splunk docs and
> ran docker inspect -f '{{.HostConfig.LogConfig.Type}}' containerID
> and the output was: Splunk, but I checked on the splunk server, ran the
> query on the docker host and searched for guacamole, it did not return
> anything.
> --log-opt splunk-token=******************* \--log-opt splunk-url=
> https://splunk aws server:8089 \--log-opt splunk-insecureskipverify=true
> \--log-opt splunk-caname=SplunkServerDefaultCert \
> I did the same thing on another host using the same splunk token and was
> able to see the docker logs on the splunk server.
> Can someone please help me with that?
> Thank you
This sounds like an issue more appropriate for either a Docker or Splunk
support forum. Guacamole Server logs to syslog, and Guacamole Client logs
to the Tomcat output (wherever that is directed), so it really is a matter
of configuring either Docker or Splunk, or both in such a way that the
output is being captured and sent to the correct place.
-Nick
