topic Re: How to consolidate Thousand Eyes into Splunk to centralize alerts on the dashboard? in Getting Data In

How to consolidate Thousand Eyes into Splunk to centralize alerts on the dashboard?

Pooja1 — Fri, 08 Mar 2024 15:38:15 GMT

Hi Team,

Hi Splunk Team, could you guide me through the process on how to consolidate Thousand Eyes into Splunk to centralize alerts on the dashboard?
Please, Share me the each and every steps to process on how to consolidate TE into Splunk.

Thanks

Re: How to consolidate Thousand Eyes into Splunk to centralize alerts on the dashboard?

Pooja1 — Sat, 09 Mar 2024 13:31:46 GMT

Hi Team,

Please help me for the below information/question.

Thanks

Re: How to consolidate Thousand Eyes into Splunk to centralize alerts on the dashboard?

Pooja1 — Mon, 11 Mar 2024 07:31:33 GMT

Hi @richgalloway

How to consolidate Thousand Eyes into Splunk to centralize alerts on the dashboard?

Please help me for the above question..

Thanks

Re: How to consolidate Thousand Eyes into Splunk to centralize alerts on the dashboard?

richgalloway — Mon, 11 Mar 2024 13:06:04 GMT

There are a few ways to onboard data into Splunk.

Install a universal forwarder on the server to send log files to Splunk
Have the server send syslog data to Splunk via a syslog server or Splunk Connect for Syslog
Use the server's API to extract data for indexing
Use Splunk DB Connect to pull data from the server's SQL database.
Have the application send data directly to Splunk using HTTP Event Collector (HEC).

This answer may be useful: https://community.splunk.com/t5/Other-Usage/Splunk-integration-with-thousandeyes/m-p/361387

Re: How to consolidate Thousand Eyes into Splunk to centralize alerts on the dashboard?

Pooja1 — Tue, 12 Mar 2024 11:54:19 GMT

Hi @richgalloway

Yes, if anything will let you know

Thanks