Financial-Times / splunk-heroku

Support for Heroku log drains packaged as a Splunk app.
https://tech.in.ft.com/tech-topics/logging/splunk/logging-from-heroku
MIT License
2 stars 0 forks source link

Add `heroku:router` event types for errors and warnings #53

Closed sjparkinson closed 2 years ago

sjparkinson commented 2 years ago

Use event types to highlight using colour error and warning messages.

There is a priority conflict with the Splunk build-in event type called err0r, which also has the default priority of 1, but no value for color. To get this working for Heroku router errors we would need to manually set the priority to 2 for the err0r event type in Splunk.

Adding/editing a Splunk app eventype.conf file will require a restart of Splunk.

Screenshot 2022-08-26 at 15 01 44

Resolves #48.