I would like to monitor the logs in /nifi-app.log (e.g. error, warning, failure, etc) with Splunk.
I have nifi running in AWS on EC2 instances. I was thinking about installing a Splunk Universal Forwarder (agent) on each EC2 nifi node and sending the nifi log data to a splunk indexer where I can create alerts and review nifi logs for troubleshooting.
Has anyone tried this before with Splunk? Any advise is appreciated. Thank you.