Apica provides multiple targets to connect with your desired destination to collect, optimize, store, route, and replay your observability data – whenever, wherever you need it.
Currently, Apica supports the below targets
Splunk HTTP Event Collector
JSON
Batched JSON forward to Splunk
Splunk Universal / Heavy Forwarder
Syslog, TCP
Syslog forwarder for Splunk
Splunk Universal CEF Forwarder
Syslog, TCP, CEF
Syslog CEF forwarder for Splunk
Splunk Universal Forwarder / Heavy Forwarder
S2S
Forward data to Apica in Cooked mode
To configure a Forwarder navigate to the Forwarder page first and Select your preferred forwarder
Below, an example of configuring a Splunk HTTP Event Collector is shown
Creating an HTTP Event Collector Data Input key from Splunk
Navigate to your Splunk Environment
Locate the Settings menu
Locate the Data Inputs sub-menu
Click on the New Token option which is located on the top banner
Enter a Token name and skip to the last page and click Done
Use the generated HTTP Event Collector key in Apica
Creating a Splunk HTTP Event Collector on Apica
Navigate to the Creaet Forwarders page
Click on Forwarders
Click on the Splunk HTTP Event Collector
Create Forwarder
Fill out all the below fields and click save
buffer_size: The Buffer size for logs
host: Splunk Endpoint
password: Data Input Key created in step 1
port: Splunk server receiving port (default 8088)
type: log format (default _json, or set to _metric to send to a metric index)
user: UI username of Splunk Endpoint
name: Name of the forwarder
That's it. You've successfully created the Splunk HTTP Event Collector forwarder. Now navigate to the Explore page and start doing Mapping or Replay operation.
Mapping allows one to map an Application or multiple Applications to the desired destination Forwarder such as Splunk, Elastic Search, etc...
To map an Application please follow the below instructions
Create a Forwarder as described in the previous section
Navigate to the Explore page
Select an Application
Hover on the Ellipsis icon next to the calendar
Select Map Forwarder
In the dialogue box select the Forwarder and click OK
Congratulations. You have successfully mapped a forwarder to an Application. Navigate to the forwarder UI to check your logs
1. Deleting the Mapping from Explore page
To delete the mapped Application/s from the explore page, please follow the below instructions
Navigate to the Explore page
Find the Application which is mapped
Select the Application
Hover on the Ellipsis icon next to the calendar
Select Delete Map Forwarder
In the dialogue box click Yes to confirm
2. Delete the Mapping from the Forwarders page
To delete the Mapping from the Forwarders page, please follow the below instructions
Navigate to the Forwarders page
Select the Mapping tab
Click on the Delete icon next to the Application name