New to Splunk and recently set up a test environment.....
Is it possible to use a SCOM command line channel using a script (not email) to inject alerts into an event management tool (not Splunk)?
- Our current script uses variables to populate the alert info into the event management tool.
- We have tons of custom subscriptions in SCOM that target a management pack classes but use a common the channel to inject into the event management tool.
- I'm looking to migrate to Splunk and was wondering if anyone has built a channel to inject alerts into Splunk in a similar way or understand how you may be routing alerts by management pack class vs. build custom alert rules in Splunk.
Interested in hearing how others might be using SCOM Channels/Subscriptions into Splunk!!
Thank you!
