Splunk alerting using catalina logs

Hi Team,

 

Has anyone done any sort of integration to ship catalina.out logs to splunk and create alerts against it?

 

I am working on it and looking for search patterns for matillion errors or unusual behaviour,

 

And addition or modification of users within matillion.

 

Thanks

Sid

Hi @siddhartha.bose

If you deploy Matillion ETL with certain types of cloudformation template (not just directly from AMI) the catalina logs are streamed to AWS Cloudwatch which also supports patterns and alerting. There is also a splunk plugin for AWS Cloudwatch if you really need splunk but that last part would not be supported by Matillion.

PS Thank you for uploading a pic to your profile!

Chika