Skyline to Splunk

[Fai]

Hello,

 I would like to know if Skyline can send metric data directly to Splunk? I did a google search and I did find this:

https://community.checkpoint.com/t5/OpenTelemetry-Skyline/how-to-ingest-skyline-data-into-splunk/td-...

My question is:

- Do we have to install a Prometheus instance APP on Splunk?

- Is there a way to ingest Skyline data directly to Splunk without Prometheus?

Thank you...

[PhoneBoy]

It appears Splunk needs some sort of collector as several are listed here with links to Splunk documentation: https://opentelemetry.io/ecosystem/distributions/
They even appear to have their own: https://docs.splunk.com/observability/en/gdi/opentelemetry/opentelemetry.html 

[Elad_Chomsky · Accepted solution]

Hi @Fai ,

https://sc1.checkpoint.com/documents/Appliances/Skyline/Content/Topics-AG/Introduction.htm

In the latest versions, Skyline supports a direct connection to Splunk - without the need to use a Prometheus server as a middle man - You only need to adjust the payload to the matching target, please review the admin guide, on how to do so.