Sending Guacamole docker container to Splunk on AWS

General Discussions
1

Hi all,

I have tried to send my Guacamole docker containers to the splunk server using the following flags:
–log-driver=splunk
–log-opt splunk-token=[my token here]
–log-opt splunk-url=https://aws instance url:8089
–log-opt splunk-insecureskipverify=true
–log-opt splunk-caname=SplunkServerDefaultCert \

But I also would like to be able to see the logs by running the docker logs guacamole command so was wondering if someone could please let me know how to have multiple ways of viewing the logs at the same time. Right now, docker logs are being forwarded to the splunk server so docker log command is no longer returning any output,

Thanks

2

Hi,
I have the logs being forwarded to the Splunk server but the problem is i would also need to be able to view them on the docker host. Is there any way we can have two log methods side by side?

Thanks

3

Hi,

I would like the Guacamole logs to get forwarded to the Splunk server and I added the log forwarding parameters I found on Splunk docs and ran docker inspect -f ‘{{.HostConfig.LogConfig.Type}}’ containerID
and the output was: Splunk, but I checked on the splunk server, ran the query on the docker host and searched for guacamole, it did not return anything.

–log-opt splunk-token=*******************
–log-opt splunk-url=https://splunk aws server:8089
–log-opt splunk-insecureskipverify=true
–log-opt splunk-caname=SplunkServerDefaultCert \

I did the same thing on another host using the same splunk token and was able to see the docker logs on the splunk server.

Can someone please help me with that?

Thank you