splunk can be integrated with Tivoli ?

[seema2502]

Hi Team,

Tivoli is an event management tool, we have configured custom mail alerts in the Splunk right now. Instead of mail alerts, the alerts needs to be shared with Tivoli then Tivoli will generate P3/P4/etc. incidents.

Please suggest, can it be possible in splunk.

Thanks,
Seema

[jtrujillo]

Yes, if you want to do Northbound from Splunk to Tivoli, you would want to use the sendsnmptrap.pl that was linked. In an alert action you would want to click the box for "script" and type in the name of "sendsnmptrap.pl" after you put the script on the search-heads running the search.

Remember that this relies on net-snmp so make sure you have that installed also.

[maciep]

Hi Seema,

Are you referring to netcool omnibus? We currently run a script after an alert is triggered to send traps over to netcool. The script we used is based on a template that I think is available on Splunk's site.

Our searches that fire alerts are formatted in a consistent way so we know which ticketing group the alert goes to, what the priority should be, the message, etc.

See the reply from aaronkorn on the following answer thread.

Traps from Splunk