How to configure the automatic creation of CA Service Desk Manager Tickets through Splunk alerts?

[phspec]

Hi everyone,

I'm trying to automate the creation of CA Service Desk Manager tickets through Splunk alerts. I understand that Splunk can call a script when an saved search alert is triggered, and that I can call a program that uses the ticketing system's API to submit a ticket, and that I put scripts in '/opt/splunk/bin/scripts'.

If anyone can help elaborate on this or point my to a script that APIs with CA Service Desk Manager, I'd greatly appreciate it.

Thanks!

[starcher]

You should look into modular alerts. And use the Add On builder app to help you once you have code that can make tickets.

Things to research:
http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/ModAlertsIntro
https://splunkbase.splunk.com/app/2962/

There is no short answer for you as you have to develop your own code. You might also look at the various Service Now apps in splunk base for ideas.

[phspec]

So I'm working with CA Service Desk Manager. I believe that's different than Service Now, or am I mistaken?

[starcher]

yes different. but you can look at how they built their integrations with Splunk.