topic Re: Skyline to Splunk in OpenTelemetry/Skyline

Skyline to Splunk

Fai — Tue, 18 Jun 2024 04:47:20 GMT

Hello,

I would like to know if Skyline can send metric data directly to Splunk? I did a google search and I did find this:

https://community.checkpoint.com/t5/OpenTelemetry-Skyline/how-to-ingest-skyline-data-into-splunk/td-p/181936

My question is:

- Do we have to install a Prometheus instance APP on Splunk?

- Is there a way to ingest Skyline data directly to Splunk without Prometheus?

Thank you...

Re: Skyline to Splunk

PhoneBoy — Tue, 18 Jun 2024 20:19:37 GMT

It appears Splunk needs some sort of collector as several are listed here with links to Splunk documentation: https://opentelemetry.io/ecosystem/distributions/
They even appear to have their own: https://docs.splunk.com/observability/en/gdi/opentelemetry/opentelemetry.html

Re: Skyline to Splunk

Elad_Chomsky — Fri, 21 Jun 2024 15:45:12 GMT

Hi @Fai ,

https://sc1.checkpoint.com/documents/Appliances/Skyline/Content/Topics-AG/Introduction.htm

In the latest versions, Skyline supports a direct connection to Splunk - without the need to use a Prometheus server as a middle man - You only need to adjust the payload to the matching target, please review the admin guide, on how to do so.