topic Re: How to be notified by Splunk? in Alerting

How to be notified by Splunk?

ric_flair_wcw — Fri, 25 Oct 2019 14:11:56 GMT

Hi experts,

I'd like my application to be alerted by Splunk if there is a problem.
I don't want to develop a monitoring submodule in my application as Splunk is already running in our department.
So how can I send alerts from Splunk to my app? What interface does Spunk have (REST, SOA, ...)? Can this communication go on a secure channel (HTTPS)?

Thank you!
V.

Re: How to be notified by Splunk?

gcusello — Wed, 30 Sep 2020 02:42:15 GMT

Hi ric_flair_wcw,
splunk has REST API that can go on https.
Splunk can report if there are problems until it's running; at the same time it can send an heartbeat to your application.

Ciao.
Giuseppe

Re: How to be notified by Splunk?

arjunpkishore5 — Fri, 25 Oct 2019 16:36:57 GMT

You can use web hooks to your application - https://docs.splunk.com/Documentation/Splunk/7.1.3/Alert/Webhooks

If this doesn't meet your needs, you can always build custom alert actions tailored to your application.

Re: How to be notified by Splunk?

saramamurthy_sp — Mon, 28 Oct 2019 08:35:31 GMT

You can always build your alerts and when these alers meet the condtion i.e the alert value reaching >1 then these alerts will be triggered and you will get the notifications in the form the email.

You can set these alerts, you can reffer to the below document which will help you to understand more.
https://docs.splunk.com/Documentation/UnixApp/5.2.5/User/Createcustomalerts

And if you are looking out which is the app that can help you for your requirement, I would suggest you to use the Rest API, you can download these in the below link.

LINK : https://splunkbase.splunk.com/app/1546/

You can configure it using the below link.

https://docs.splunk.com/Documentation/AddonBuilder/2.2.0/UserGuide/ConfigureDataCollection