How can i log Knowi server events to an external service like Splunk?

For on-premise installation, you can subscribe to a custom log topic called KnowiEvents which returns a JSON formatted metric of events in your instance. 

To configure this appender,

1. Navigate to your log4j.properties file, which you can find under <tomcat>/conf/cloud9
   Note: For older Knowi installation, your log4j.properties file will be found under <tomcat>/webapps/ROOT/WEB-INF/classes

2. Update log4j.properties with the following:

log4j.logger.KnowiEvent=ERROR

# Define your appender however you want:
log4j.appender.KnowiEvent=.....

# Enable KnowiEvent category to log to your appender:

log4j.logger.KnowiEvent=INFO, KnowiEvent
log4j.additivity.KnowiEvent=false