Hi, I am sure this question must have asked multiple times and infact I've come across multiple posts but I am still unanswered.
So I am a Splunk developer/analyst who is looking to integrate my Splunk Enterprise with OpsGenie to send alert notifications but when I look at the integration here https://support.atlassian.com/opsgenie/docs/integrate-opsgenie-with-splunk/ it says to install an app in Splunk base and when I go to that app https://splunkbase.splunk.com/app/3759/ it says "This app is NOT supported by Splunk. Please read about what that means for you here."
What does this mean? As an Admin we can see the app when we browse in Splunk. Does it mean if we install it it won't break or could break other things?
Let me know if anyone has done this integration on their on-prem Splunk enterprise architecture. Any input is appreciated.
API endpoints are hardcoded into python code. There is two different OpsGenie app in Splunkbase for US and EU regions. If your OpsGenie account is in EU region, you should use below version.
Opsgenie(EU) for Splunk
"This app is NOT supported by Splunk" means this App or TA is not maintained by Splunk. This does not mean that it will break your system if you check your Splunk Enterrpise version is in the Compatibility list.
If you have any problem you need to check Splunk Community pages or try to contact with the app developer.
We have done this integration using this app, on a customers on-prem Splunk.
Hi @scelikok Thanks for your quick response.
We have just integrated our test environment with OpsGenie. We tested it and not getting any alerts in OpsGenie.
As per the instruction it only takes API key in Splunk to send the data. BUT my question is how will Splunk knows where to send the data to? I mean there is no domain/hostname/port etc.
I am using this link to follow the steps. https://support.atlassian.com/opsgenie/docs/integrate-opsgenie-with-splunk/
We're using Opsgenie with Splunk
Installed the app and then added the API (from the Splunk integration in Opsgenie) in the Set up.
Have you reviewed the Opsgenie logs to confirm whether or not the alert was received from Splunk?
It may have been received, but failed to create an alert for some other reason.