Hi Olivier

I helped one of customers to deisgn the integration between CMS and Splunk. It's definitely possible. I don't see any plugins availabe for achiving this type of integration at that time. 

Firstly, I would suggest you get IT department to confirm what type of logs they're looking for first as it can help you to determine the size of integration you would need. For example, your IT may only want to collect the logs info for CMS author only like who changes the content at what time, in this case you only need to integrate the Activity log which you can find some details from here https://docs.developers.optimizely.com/content-management-system/docs/activity-logging.

Secondly, figuring out the splunk version they used and the options of integration capability in the current version. The simpliest one would be httpcollector approach as it would turn the integration into simple RESTful API

I hope above helps. 

Hi Olivier,

From Opti Developer Docs - 

>>>> Application logging is turned on, with level Error, and logs are stored in the BLOB storage with 90 days retention.

There are many articles that explain how to download blobs from Opti. This is my personal favorite - 

https://world.optimizely.com/blogs/Antti-Alasvuo/Dates/2021/6/how-to-download-blobs-from-optimizely-episerver-dxp-environment/


Have you heard of Epinova? They have written some very nice PowerShell scripts that can be used to: deploy your app, export a database file (.bacpac), or download blobs -- including application logs, web logs, and blobs (e.g., images). Take a look - 

https://github.com/Epinova/epinova-dxp-deployment/blob/master/Scripts/DownloadDxpBlobs.md


I hope that helps!

Glen