Has anyone hooked up Splunk to the thousandeyes network monitor? I would rather not re-invent the wheel, but I would like to import what it sees into my Splunk repository.
Thanks in advance - Steve
What we wound up doing is writing a C# windows service that hits the Thousand eyes API and reports any test failures. The frequency of this polling is configurable, but set to every 5 minutes by default. Not perfect, but we are getting valuable data.
Has one tried using the modular inputs app?
It would be awesome if you could share your results if you configured it.
Thanks.
So, I looked through the APIs and it looks like in order to get all the metrics it'll require:
1. Firstly, to get list of currently configured tests https://developer.thousandeyes.com/v6/tests/
each test includes actions it does and, accordingly, pointers to those actions, from which we can get metrics, example:
https://api.thousandeyes.com/v6/web/http-server/your_testid_here.json
.
.
sure @HackerAce, here is the guts of our C# capture routine. We pass in https://api.thousandeyes.com/alerts.xml as the URI. Once you get the data, you can parse it and then either use HEC or write to a file that a UF is reading from.
Cheers - Steve
public static string Fetch(string URI)
{
string content = string.Empty;
string username = Credentials.GetUsername();
string password = Credentials.GetPassword();
string userpass = string.Format("{0}:{1}", username, password);
WebRequest req = WebRequest.Create(URI);
req.Method = "GET";
req.Headers["Authorization"] = "Basic " + Convert.ToBase64String(Encoding.Default.GetBytes(userpass));
HttpWebResponse resp = req.GetResponse() as HttpWebResponse;
if (resp.StatusCode == HttpStatusCode.OK)
{
using (var stream = resp.GetResponseStream())
using (var sr = new StreamReader(stream))
{
content = sr.ReadToEnd();
}
}
return content;
}
I would be interested to know how the integration works and if you would be willing to share?
What we wound up doing is writing a C# windows service that hits the Thousand eyes API and reports any test failures. The frequency of this polling is configurable, but set to every 5 minutes by default. Not perfect, but we are getting valuable data.
How did you configure the address for the SAAS, I am not seeing where that is supposed to be inputted/configured?