Other Usage

How can I identify a different way to send a Splunk alert in an external system?

jip31
Motivator

Hi

I would like to identify the different way to send splunk results alert in Centreon.

I know its possible to send Centreon events in Splunk with the Centreon steamer connector and the Splunk HTTP Event Collector but my need will be to send Splunk alerts in Centreon

Except in i am mistaken, the solution to interface splunk alerts with an external system will be to run a custom alert action with script (shell or python) using the results of a saved search ?

Is it exact? Is there any other solutions to do that?

Thanks for your help

Labels (1)
Tags (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @jip31 ,

I didn't tried to integrate Splunk with Centreon , so I hint to see is the "Centreon For Splunk" app has some feature to do this.

In  general, as you said, it's possible to run a script (in the language you prefer) that calls the Centreon API and send an alert to Centreon. 

Ciao.

Giuseppe

View solution in original post

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @jip31 ,

I didn't tried to integrate Splunk with Centreon , so I hint to see is the "Centreon For Splunk" app has some feature to do this.

In  general, as you said, it's possible to run a script (in the language you prefer) that calls the Centreon API and send an alert to Centreon. 

Ciao.

Giuseppe

0 Karma

jip31
Motivator

Hi Gcusello

Thanks for your answer

Concerning the "Centreon For Splunk" addon, I have installed it in my DEV environment

When I create an alert, I can see a trigger called "Centreon Service Submit Result"

Pearhaps, this service is able to send alerts in Centreon?

If yes, what are the different tasks to configure this addon in order to send alert in my centreon platform correctly?

Thanks

jip31_0-1684991076201.png

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @jip31 ,

good for you, see next time!

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @jip31 ,

it seems that in the app there's an alert action to send logs to Centreon,

see in documentation how to configure it, I connot help you more in this.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...