API Gateway Integration with Splunk

[Geethu John]

Hi,

My client is interested in sending API gateway logs in Splunk , so that they can visualize metrics in a dashboard. While exploring about this, I happened to come across two articles:

• API Gateway Metrics: Externalizing metrics to Splunk

• Enriching and Externalizing Gateway Metrics to Splunk - API Academy

Are these still valid? we have api gw 10.1 in our env , with no api portal. Other than latency, status codes, total requests etc, can we view backend api usage by each front end app (similar to api portal).?

Geethu

[William Forsyth]

Hi Geethu:

Sorry for the slow response,  off-boxing metrics is supported and even encouraged as we move customers to more of a 12-factor design where services are external and the gateway in Kubernetes form factor can be more easily deployed in an ephemeral approach.   Many enterprise customers are still off-boxing to Splunk in the most recent release v10.1 release.  

Ping, who presented the material is still working on the Layer 7 team so is available if you have any issues with the approach.   Let us know. 

Thanks, Alex.

[Philip Mead]

I wrote a policy to use the Precision Monitoring solutions kit, parse out the results into JSON, and send those to Splunk either through HEC or the ssglog.

I just copied and modified the policy that comes with Precision Monitoring.

[Geethu John]

Thanks a lot for the suggestions and  replies.