Splunk integration

You can stream errors to a Splunk cloud system during a test run. To stream errors to Splunk, do the following.

Action	Task
Configure your Splunk account	In your Splunk account, configure the following for the HTTP Event Collector. Create a new token Enter a name for the HTTP Event Collector. Set the Source type to _json. When the new token is created, note the token value that is displayed (you need this when configuring OpenText Core Performance Engineering). Enable the token Note the HTTP port number that is displayed (you need this when configuring OpenText Core Performance Engineering). For details on configuring the HTTP Event Collector, refer to the Splunk documentation.
Configure your Splunk account details in OpenText Core Performance Engineering	On the navigation menu, select Tools and integrations button > Streaming accounts > Splunk account. In the dialog box that opens, configure: Your HTTP Event Collector URL that was sent to you by Splunk when you created your Splunk instance. The HTTP Event Collector port number. The HTTP Event Collector token. The option to mark a Managed Splunk account was deprecated, beginning with version 2021.08. Click Apply.
Enable error streaming for a load test	Select the Load Test tab and select a load test. Click the Test settings tab . In the Test settings page, select Stream errors to Splunk in the Data and logs section. For details, see Data and logs.

Action

Task

Configure your Splunk account

In your Splunk account, configure the following for the HTTP Event Collector.

Create a new token
1. Enter a name for the HTTP Event Collector.
2. Set the Source type to _json.
When the new token is created, note the token value that is displayed (you need this when configuring OpenText Core Performance Engineering).
Enable the token

Note the HTTP port number that is displayed (you need this when configuring OpenText Core Performance Engineering).

For details on configuring the HTTP Event Collector, refer to the Splunk documentation.

Configure your Splunk account details in OpenText Core Performance Engineering

On the navigation menu, select Tools and integrations button > Streaming accounts > Splunk account.
In the dialog box that opens, configure:
- Your HTTP Event Collector URL that was sent to you by Splunk when you created your Splunk instance.
- The HTTP Event Collector port number.
- The HTTP Event Collector token.
- The option to mark a Managed Splunk account was deprecated, beginning with version 2021.08.
Click Apply.

Enable error streaming for a load test

Select the Load Test tab and select a load test.
Click the Test settings tab .
In the Test settings page, select Stream errors to Splunk in the Data and logs section. For details, see Data and logs.

Notes and Limitations

Streaming errors to Splunk is enabled only for tests run in the cloud.
You can stream errors to a Splunk Cloud account only.
Only one Splunk account can be configured for a tenant.
During a load test run, only the first 500,000 errors are sent to the Splunk account.
If your Splunk account was already configured before version 2021.08, the URL shown in the Splunk Account dialog box contains a prefix of input- or http-inputs, depending on if you had a managed Splunk account.
From version 2021.08, whenever you configure a Splunk account through OpenText Core Performance Engineering, a message is sent to the Splunk account for validation.