This application is developed to connect to the Open Telekom Cloud Object Storage service holding the Cloud Trace, Cloud Eye, and VPC Flow event logs for processing.
Open Telekom Cloud Docs - https://docs.otc.t-systems.com/
Cloud Trace Documentation - https://docs.otc.t-systems.com/en-us/cts/index.html
Cloud Eye Documentation - https://docs.otc.t-systems.com/en-us/ces/index.html
Object Storage Service Documentation - https://docs.otc.t-systems.com/en-us/obs/index.html
Object Storage Client developer tools - https://docs.otc.t-systems.com/en-us/sdk_python_api/obs/en-us_topic_0080493166.html
Splunk Modular Input Development - https://docs.splunk.com/Documentation/Splunk/7.2.6/AdvancedDev/ModInputsIntro
Open Telekom Cloud Federation - https://docs.otc.t-systems.com/en-us/usermanual/iam/en-us_topic_0059870091.html
This application flow includes:
1. Authenticate against Azure SSO and retrieve token (get_token)
2. Using the token retrieve a tempoary Access Key/Security Key for use by the obsclient to access the bicket (get_AK)
3. Read the Bucket object and process all events in all logs for indexing
4. Write a checkpoint object of last object processed.
The application configuration requires the following information
idpname = The name of the idp definition created on open Telekom Cloud
username = Azure AD account
userpass = Azure AD account password
Because Azure AD does not support ECP we use screen scraping to perform the SSO Authentication to retrieve the resulting token.
Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 50GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.