|
1 | 1 | # MarkLogic Monitoring for Splunk
|
2 | 2 |
|
3 |
| -MarkLogic Monitoring for Splunk provides configurations and pre-built dashboards that deliver real-time visibility into Error, Access, and Audit log events |
4 |
| - to monitor and analyze MarkLogic logs with Splunk. |
| 3 | +MarkLogic Monitoring for Splunk provides configurations and pre-built dashboards that deliver real-time visibility into |
| 4 | +Error, Access, Request, and Audit log events to monitor and analyze MarkLogic logs with Splunk. |
5 | 5 |
|
6 | 6 | The app includes:
|
7 | 7 | - Monitoring dashboard providing an overview of cluster activity and highlighting significant error events
|
8 | 8 | - Log file dashboards with filters for Error, Access, and Audit log fields
|
9 |
| -- Pre-configured soucetypes and fields for MarkLogic Error, Access, and Audit log messages |
| 9 | +- Pre-configured soucetypes and fields for MarkLogic Error, Access, Request, and Audit log messages |
10 | 10 | - Lookups configured with MarkLogic [features, error codes](https://docs.marklogic.com/guide/messages/intro), and [log levels](https://docs.marklogic.com/guide/admin/logfiles#id_37841)
|
11 | 11 |
|
12 | 12 | ## Configuration
|
@@ -41,13 +41,14 @@ Below are example stanzas that can be applied to your *inputs.conf* in order to
|
41 | 41 | The MarkLogic Monitoring dashboard queries make use of *macros* in order to construct base queries that target
|
42 | 42 | MarkLogic log events from the MarkLogic sourcetypes for Error, Access, and Audit logs
|
43 | 43 |
|
44 |
| -- *marklogic_index* - search criteria limited to `(index=main OR index=marklogic)` |
| 44 | +- *marklogic_index* - search criteria limited to `(index=default OR index=main OR index=marklogic)` |
45 | 45 | - *marklogic_access* - restricts searches to the MarkLogic *_AccessLog.txt events
|
46 | 46 | - *marklogic_audit* - restricts searches to the MarkLogic AuditLog.txt events
|
47 | 47 | - *marklogic_error* - restricts searches to the *ErrorLog.txt events
|
| 48 | +- *marklogic_request* - restricts searches to the *_RequestLog.txt events |
48 | 49 |
|
49 | 50 | You can change these by modifying the *marklogic*, *marklogic_index*, *marklogic_error*, *marklogic_access*,
|
50 |
| -and *marklogic_audit* macros under *Settings > Advanced search > Search macros*. |
| 51 | +*marklogic_request*, and *marklogic_audit* macros under *Settings > Advanced search > Search macros*. |
51 | 52 |
|
52 | 53 | ## Getting Help
|
53 | 54 | Submit issues or feature requests at https://github.com/marklogic-community/marklogic-monitoring-for-splunk/issues
|
|
0 commit comments