Hi everyone,
I'm trying to automate the creation of CA Service Desk Manager tickets through Splunk alerts. I understand that Splunk can call a script when an saved search alert is triggered, and that I can call a program that uses the ticketing system's API to submit a ticket, and that I put scripts in '/opt/splunk/bin/scripts'.
If anyone can help elaborate on this or point my to a script that APIs with CA Service Desk Manager, I'd greatly appreciate it.
Thanks!
You should look into modular alerts. And use the Add On builder app to help you once you have code that can make tickets.
Things to research:
http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/ModAlertsIntro
https://splunkbase.splunk.com/app/2962/
There is no short answer for you as you have to develop your own code. You might also look at the various Service Now apps in splunk base for ideas.
So I'm working with CA Service Desk Manager. I believe that's different than Service Now, or am I mistaken?
yes different. but you can look at how they built their integrations with Splunk.