Shibboleth Metrics to Splunk

[Christopher Bongaarts]

On 3/12/2024 4:26 AM, Alan Buxey via users wrote:
> there were a couple of sessions at last years TechEx (Minnesota) where 
> people were presenting throwing their metrics into Splunk et al (there 
> was Splunk, Prometheus, Grafana and usual ELK) - I'd suggest having a 
> look at the presentations/slides and see how they were achieving their 
> outcomes  (as I can't recall from the top of my head any of the config 
> snippets they showed :) )

We didn't present on that topic, despite the home-field advantage, but 
we put Shib metrics in Splunk using a python script that runs from cron 
on each IdP VM.  It connects to the admin/metrics endpoint on the Shib 
server, and dumps selected metrics to the Splunk HEC.  Both the Shib and 
Splunk HTTP connections are done by shelling out to curl rather than 
using built-in HTTP support in python.

This has been sufficient for our purposes to date, so we haven't done 
any further optimization on it.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%