Splunk(r) Firehose Nozzle for PCF automatically parses application logs and platform components’ metrics, enriches them with additional metadata, and then forwards to Splunk. This process allows for powerful visualizations and meaningful alerts on your most important PCF logs and metrics.
Out-of-the-box data parsing and enrichment for various PCF event types.
Reliable event delivery
Stream events efficiently and securely to Splunk with HTTP Event Collector.
Grows as needs grow
Scales out to meet increasing data volume and number of apps.
Splunk for IT Operations
Splunk Inc. (NASDAQ: SPLK) turns machine data into answers. Organizations use market-leading Splunk solutions with machine learning to solve their toughest IT, IoT and security challenges. Use Splunk software in the cloud and on-premises to improve service levels, reduce operations costs, mitigate security risks, enable compliance, enhance DevOps collaboration and create new product and service offerings. Join millions of passionate users and try Splunk for free today.
Option to consume app logs and metrics from the Loggregator firehose
Option to consume platform component metrics from the Loggregator firehose
The nozzle is deployed as an app running on Pivotal Cloud Foundry
The nozzle is documented with instructions for setup and operation
The nozzle adds org, space, and app names to app logs and metrics
The nozzle caches old, space, and app names from metadata for performance
The nozzle consumes data from the Loggregator firehose and forwards it to other applications and services via an encrypted channel
The nozzle supports high availability against internal service failures to minimize event loss
The nozzle makes use of multiple availability zones in cloud deployments to minimize event loss
We’re excited to partner with Pivotal Cloud Foundry to accelerate the application development and deployment process for our joint customers. With Splunk’s real-time event visibility and monitoring, developers are able to move faster than ever – quickly pinpointing root causes, setting meaningful alerts, and utilizing powerful visualizations. Our partnership enables IT Operations teams to be more productive, all while helping reduce IT costs with platform automation.
Dave Schwartz, AVP, Global Strategic Alliances, Splunk
How it Works
The Splunk Firehose Nozzle for PCF was developed as an application that runs with Pivotal Application Service (PAS). The Nozzle subscribes to the Loggregator endpoint and writes events to an external Splunk environment.
- The Splunk Firehose Nozzle for PCF collects events from the PCF Loggregator endpoint and streams them to Splunk via HTTP event collector (HEC). Nozzle has in-memory queue buffers to increase reliability, and has parallel client to scale out multiple ingestion channels to HEC.
- The Splunk Firehose Nozzle for PCF can be deployed natively within a PAS environment and is available as a free tile from Pivotal.
- The Splunk HTTP Event Collector clients run concurrently, consuming events from the queue to enrich PCF events by attaching metadata fields. For scaling out, add as many HECs and place a load balancer in front.
- After data has been ingested into Splunk, it can be explored using the Splunk Add-on for Cloud Foundry—an add-on to Splunk Enterprise which parses data from any Cloud Foundry distribution—which includes pre-built panels and pre-configured search parameters.
Read the documentation
Thank you for your interest!
We will get back to you shortly.