Document toolboxDocument toolbox

Cloud Foundry Syslog

Owned by Ben Bramley
Nov 12, 2024
4 min read

Overview

SAP Cloud Foundry is a cloud plaform that allows you to create polyglot cloud applications in Cloud Foundry. It contains the SAP BTP, Cloud Foundry runtime service, which is based on the open-source application platform managed by the Cloud Foundry Foundation.

The Cloud Foundry environment enables you to develop new business applications and business services, supporting multiple runtimes, programming languages, libraries, and services. You can leverage a multitude of buildpacks, including community innovations and self-developed buildpacks. It also integrates with SAP HANA extended application services, advanced model (SAP HANA XSA). The

PowerConnect Cloud SAP Cloud Foundry Syslog Input allows any application deployed in SAP Cloud Foundry to send it’s logs to the PowerConnect Cloud agent. These logs are then normalized, transformed and pushed to Splunk.

Data Collected

Syslog log data including logged errors and opentracing traces

Status

Beta

Configuration

Sylog over HTTPs

Cloud Foundry is able to send syslog over https. As a prerequisite this requires the PC Cloud agent to be configured with SSL by following these steps (if the PC Cloud agent is deployed in Cloud Foundry its already SSL enabled) - Configuring the PowerConnect Agent UI to use SSL

Then do the following:

  • Login to the PowerConnect Cloud UI

  • Click on the Inputs tab

 

  • Click Add New

 

  • Under the Platform menu choose CF

  • Then under syslog select cf-syslog-http

  • Fill in the details for the Syslog Input, the System ID is mapped to the source field in Splunk

  • Click Save

  • The Input should now be created and visible in the Inputs table

  • In the Inputs table, click the View button under the Actions column for the newly created Syslog input

  • Click the unhide button next to the Token and note down the value

  • The token value will be used to authenticate the syslog data coming from the SAP Cloud Foundry applications

  • The next step is to create the PowerConnect Cloud syslog service

    cf create-user-provided-service powerconnect-syslog -l https://<pc-cloud-url>/ingest/http/<input-id>/<token>

    • <pc-cloud-url> is the url where the pc cloud agent is running

    • <input-id> is the input id of the syslog input you just created

    • <token> is the token belonging to the syslog input you just created

  • Then bind the new syslog service to the application you wish to send logs from

    cf bind-service <app-name> powerconnect-syslog

    • <app-name> is the name of the application you wish to monitor

  • The application will then need to be restaged

    cf restage <app-name>

 

Syslog over TCP

hen do the following:

  • Login to the PowerConnect Cloud UI

  • Click on the Inputs tab

 

  • Click Add New

 

  • Under the Platform menu choose CF

  • Then under syslog select cf-syslog-tcp

  • Fill in the details for the Syslog Input, the System ID is mapped to the source field in Splunk. The port should be set to an available TCP port above 1024

  • Click Save

  • The next step is to create the PowerConnect Cloud syslog service

    • <pc-cloud> is the host where the pc cloud agent is running

    • <syslog-port> is the port you configured for the syslog input

  • Then bind the new syslog service to the application you wish to send logs from

    • <app-name> is the name of the application you wish to monitor

  • The application will then need to be restaged

Â