# splunk-heroku

**Repository Path**: mirrors_Financial-Times/splunk-heroku

## Basic Information

- **Project Name**: splunk-heroku
- **Description**: Support for Heroku log drains packaged as a Splunk app.
- **Primary Language**: Unknown
- **License**: MIT
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2022-06-16
- **Last Updated**: 2026-05-17

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# Heroku Splunk app

Support for [Heroku log drains](https://devcenter.heroku.com/articles/log-drains) packaged as a Splunk app.

The log drain messages contain [Syslog-formatted messages](https://datatracker.ietf.org/doc/html/rfc5424#section-6), framed using the [Syslog TCP protocol octet counting framing method](https://datatracker.ietf.org/doc/html/rfc6587#section-3.4.1).

This Splunk app is compatible with the [Splunk Common Information Model (CIM)](https://docs.splunk.com/Documentation/CIM/5.0.1/User/Overview) for [Web](https://docs.splunk.com/Documentation/CIM/5.0.1/User/Web) and [Change](https://docs.splunk.com/Documentation/CIM/5.0.1/User/Change).

## Source types

| Source type     | Description                                                                                                                  |
|-----------------|------------------------------------------------------------------------------------------------------------------------------|
| `heroku:app`    | Logging output from the application itself, including logs generated by your app’s code and dependencies.                    |
| `heroku:router` | Request logs produced by the Heroku HTTP routers.                                                                            |
| `heroku:system` | Messages about actions taken by the Heroku platform.                                                                         |
| `heroku:api`    | Messages about Heroku app administrative actions taken by users.                                                             |
| `heroku`        | To be used as the default source type for Splunk HEC tokens, updates events to a more specific source type using transforms. |

## Releasing

[Create a release in GitHub](https://docs.github.com/en/repositories/releasing-projects-on-github/managing-releases-in-a-repository#creating-a-release) to trigger a workflow that builds and uploads an package to the [GitHub release assets](/releases), e.g. `splunk_heroku-1.0.8.tar.gz`. [This file can be installed on Splunk.](https://docs.splunk.com/Documentation/SplunkCloud/latest/Admin/PrivateApps)

The version number in `app/default/app.conf` will automatically be updated in the default branch to match the release via a pull request.