YashS.48364 (Customer) asked a question.
Utilizing Okta Log Streaming on Splunk Cloud
Hi Community, this is regarding an early access feature for one of my "oktapreview" account
I have configured Log Streaming in Splunk Cloud using this document as a reference - https://help.okta.com/oie/en-us/Content/Topics/Reports/log-streaming/add-splunk-log-stream.htm
When I enter the "Host" field value with the hostname - <part1>.<part2>.stg.splunkcloud.com, I am getting an error that states "Host should be a domain without http or https. For example: acme.splunkcloud.com"
Then I entered another instance's hostname - <stackname>.splunkcloud.com, the error was resolved but I am not able to see logs in my Splunk Cloud instance although there are Logs in my account and the Log Stream is active.
My concerns are:
- Why did the first hostname not work while configuring the log stream? Does the Host field have a specific format for its value to be accepted?
- Even after configuring the log stream, I am not able to see the logs. What am I missing here? How can I debug this?
Hi Yash,
Thank you for reaching Okta Support, Sebastian here.
In regards to your situation, please go ahead and open a case from the tenant in cause for further investigations.
Below you will find a documentation on how to open a case:
https://support.okta.com/help/s/article/How-to-Create-a-Support-Case?language=en_US
Thank you!
Sebastian Zenizleac
Technical Support Engineer
Okta Global Customer Care