Registry / observability / splunk-logging

splunk-logging

library0.11.1jsnpmunverified

The `splunk-logging` package provides a straightforward JavaScript interface for Node.js applications to send log data to Splunk Enterprise or Splunk Cloud via the HTTP Event Collector (HEC). The current stable version is 0.11.1, with releases occurring periodically to address dependencies and minor enhancements rather than a fixed cadence. This library simplifies the process of sending events by handling connection details, batching, and retries automatically. Key features include configurable batching settings (interval, maximum count, and maximum size), support for custom event formatting, and options for SSL certificate validation. While primarily community-supported, it is an official Splunk project designed for seamless integration with Splunk HEC endpoints, making it a robust choice for Node.js-based logging into the Splunk ecosystem.

observability http-networking

npm install splunk-logging

github ↗package ↗homepage ↗

INSTALL

IMPORT

SIG · SPLUNK-LOGGING

splunk-logging

observabilityjavascriptv0.11.1

Install

—

Import

—

Disk

—

Pass rate

0/ 6

Env Coverage0 / 6

glibc

18–22

musl

18–22

Install & Compatibility

Where this runs

tested against v? · npm install

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

node 18–226 runs

build_error

glibc

node 18–226 runs

build_error

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

Logger

✓ import { Logger } from 'splunk-logging';

✗ import SplunkLogger from 'splunk-logging';

For ESM modules in Node.js, the `Logger` class is a named export.

Logger

✓ const { Logger } = require('splunk-logging');

✗ const Logger = require('splunk-logging');

Modern CommonJS destructuring for the `Logger` class.

Logger

✓ var SplunkLogger = require('splunk-logging').Logger;

✗ var Logger = require('splunk-logging');

Traditional CommonJS import as shown in older examples.

Demonstrates configuring a Splunk logger with environment variables for token and URL, then sending a structured JSON payload to the HTTP Event Collector, and logging the Splunk response.

import { Logger } from 'splunk-logging'; const config = { token: process.env.SPLUNK_HEC_TOKEN ?? '', url: process.env.SPLUNK_HEC_URL ?? 'https://splunk.local:8088' }; const splunkLogger = new Logger(config); // Optionally enable SSL certificate validation (highly recommended for production) // splunkLogger.requestOptions.strictSSL = true; const payload = { // Message can be anything; doesn't have to be an object message: { service: 'my-node-app', level: 'info', event_id: Math.floor(Math.random() * 1000000), details: 'User activity logged successfully.', timestamp: new Date().toISOString() }, // Optional metadata metadata: { source: 'my-node-app', sourcetype: 'node:json', host: 'my-server' } }; console.log('Sending payload', JSON.stringify(payload, null, 2)); splunkLogger.send(payload, function(err, resp, body) { if (err) { console.error('Error sending data to Splunk:', err); return; } // If successful, body will be { text: 'Success', code: 0 } console.log('Response from Splunk:', body); });

Debug

Known issues

gotchaBy default, SSL certificate validation is disabled (`Logger.requestOptions.strictSSL = false`). This poses a significant security risk, especially in production environments where secure communication is critical.

fix

To enable SSL validation, set `Logger.requestOptions.strictSSL = true` immediately after initializing your SplunkLogger instance. Ensure your Node.js environment trusts the certificate authority for your Splunk instance.

affects: >=0.0.1

breakingIn version 0.11.0, the underlying HTTP client implementation was switched from the deprecated 'request' library to 'needle'. While designed for compatibility, users relying on specific behaviors, undocumented options, or advanced configurations of the 'request' library might encounter subtle changes or unexpected behavior.

fix

Review your logger configuration, especially custom `requestOptions`, if upgrading from versions prior to 0.11.0. Thoroughly test network interactions to ensure continued compatibility.

affects: >=0.11.0

gotchaThe library does not automatically handle all possible Node.js versions. While tested with v10 and v14, newer Node.js LTS versions may introduce subtle breaking changes in core modules (e.g., `http`, `https`) that could affect the underlying `needle` client.

fix

Refer to the official project's GitHub page for the latest tested Node.js versions. If encountering network-related issues, try testing with the Node.js versions explicitly stated as supported.

affects: >=0.11.0

Errors

Common errors & fixes

UNABLE_TO_VERIFY_LEAF_SIGNATURE

Node.js could not verify the SSL certificate of the Splunk HEC endpoint, often due to self-signed certificates, an expired certificate, or a missing Certificate Authority (CA) bundle.

fix

Either disable SSL validation (`Logger.requestOptions.strictSSL = false` - *not recommended for production*) or ensure that the Splunk HEC endpoint's SSL certificate chain is valid and trusted by your Node.js environment. You might need to add custom CA certificates to your system's trust store or configure Node.js to use them.

connect ECONNREFUSED <splunk-host>:<port>

The Splunk HTTP Event Collector endpoint is unreachable, not running, or a firewall is blocking the connection from your application's host to the Splunk instance.

fix

Verify that the `url` configuration in your `SplunkLogger` instance is correct, ensure the Splunk HEC service is running and configured to listen on the specified port, and check network connectivity and firewall rules between your application server and the Splunk host.

{ text: 'Invalid token', code: 4 }

The HTTP Event Collector token provided in the logger configuration is invalid, expired, or not correctly configured on the Splunk instance.

fix

Double-check the HEC token in your `Logger` configuration against the token configured in your Splunk Enterprise or Splunk Cloud instance. Ensure the token is enabled and has the necessary permissions to receive events.

Upgrade

Version history

0.11.1latest on npm

Audit

Dependencies

No dependency data recorded yet.

Agent activity

23 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/splunk/splunk-javascript-logging ↗

packagehttps://www.npmjs.com/package/splunk-logging ↗

homepagehttps://www.splunk.com ↗