All Apps and Add-ons

How to link Aruba Central (logs, reporting etcc) to Splunk server?

anandnagarajan
New Member

Has anyone linked Aruba Central(logs, reporting etcc) to splunk server?
i was told Webhook was one option.

Tags (2)
0 Karma

alphiapj
Loves-to-Learn

I've been trying to get this to work as well.

Not sure if you had any luck.

I have created a HEC instance and tested it.

I created a webhook, but unsure of the URL to correctly add.  I simply get HTTP 500 status when I test the aruba webhook.

I'm sure there is a better way to setup the URL on the aruba side so it correctly sends data to inject.

0 Karma

manuel
New Member

Did you finally integrate Aruba Central via HEC?

0 Karma

alphiapj
Loves-to-Learn

I did get it to work. Much trial and effort as it was my first experience at HEC and webhooks.

This was the correct URL I figured for the Aruba central to send to my HEC.

https://<HEC URL>:8088/services/collector/raw?token=<your token>

0 Karma
Get Updates on the Splunk Community!

Splunk APM & RUM | Upcoming Planned Maintenance

There will be planned maintenance of the streaming infrastructure for Splunk APM and Splunk RUM in the coming ...

Part 2: Diving Deeper With AIOps

Getting the Most Out of Event Correlation and Alert Storm Detection in Splunk IT Service Intelligence   Watch ...

User Groups | Upcoming Events!

If by chance you weren't already aware, the Splunk Community is host to numerous User Groups, organized ...