# Canton Logs to Splunk

**URL:** <https://forum.canton.network/t/canton-logs-to-splunk/5103>\
**Category:** App Development\
**Tags:** canton\
**Created:** [August 19, 2022, 1:45am UTC](https://forum.canton.network/t/canton-logs-to-splunk/5103 "2022-08-19T01:45:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![alf3256](https://avatars.discourse-cdn.com/v4/letter/a/7cd45c/32.png) [@alf3256](https://forum.canton.network/u/alf3256)\
**Post date:** [August 19, 2022, 1:45am UTC](https://forum.canton.network/t/canton-logs-to-splunk/5103/1 "2022-08-19T01:45:41Z")

</div>

Hi,  
Is there a way to send Canton logs to Splunk?

---

<div class="post-metadata">

**Author:** ![Meriam\_Lachkar](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.canton.network/meriam_lachkar/32/3999_2.png) [@Meriam\_Lachkar](https://forum.canton.network/u/Meriam_Lachkar)\
**Post date:** [August 29, 2022, 11:54am UTC](https://forum.canton.network/t/canton-logs-to-splunk/5103/2 "2022-08-29T11:54:47Z")

</div>

Hello,  
Canton uses [Logback](https://logback.qos.ch/) as the logging library. All Canton logs derive from the logger `com.digitalasset.canton` . By default, Canton will write a log to the file `log/canton.log` using the `INFO` log-level and will also log WARN and ERROR to stdout. You can find more about it [here](https://docs.daml.com/canton/usermanual/monitoring.html).

I am not familiar with Splunk, but I guess there is some documentation on Splunk on how to read a local log file and send it to Spunk server.

Is that answer your question ?  
Thanks

---

<div class="post-metadata">

**Author:** ![alf3256](https://avatars.discourse-cdn.com/v4/letter/a/7cd45c/32.png) [@alf3256](https://forum.canton.network/u/alf3256)\
**Post date:** [August 29, 2022, 1:04pm UTC](https://forum.canton.network/t/canton-logs-to-splunk/5103/3 "2022-08-29T13:04:30Z")

</div>

Thanks. It helps. If I understand this correctly, the log file needs to be sent to splunk somehow. I guess this configuration will be coming from Splunk’s end.

---

<div class="post-metadata">

**Author:** ![Meriam\_Lachkar](https://yyz2.discourse-cdn.com/flex034/user_avatar/forum.canton.network/meriam_lachkar/32/3999_2.png) [@Meriam\_Lachkar](https://forum.canton.network/u/Meriam_Lachkar)\
**Post date:** [August 29, 2022, 1:14pm UTC](https://forum.canton.network/t/canton-logs-to-splunk/5103/4 "2022-08-29T13:14:10Z")

</div>

Yes exactly. Or some splunk listener needs to be installed on the same machine and reading the log file.