Splunk Alert Events

Sync Splunk alert events to Flashduty via webhook for automated alert noise reduction.

In Splunk

I. Splunk Alert Push Configuration

Log in to your Splunk console
In the Search and Report application, search for keywords you want to monitor, such as "error"
In the upper right corner's save menu, select Alerts to configure the search keywords as monitoring items

In the configuration popup, enter relevant information. Configure the set up and Triggering conditions sections according to your needs
In the Trigger Action section, click Add Action and select Webhook

In the Webhook section, enter the integration push URL in the URL field (the URL will be generated after saving the integration name on the current page) and save to complete the alert configuration

II. Status Mapping

Since Splunk alert events don't differentiate severity levels, all alert events pushed from Splunk to Flashduty will have a Warning status and won't include recovery events.

Splunk Alert Events Integration

In Flashduty

Using Private Integration

Using Shared Integration

In Splunk

I. Splunk Alert Push Configuration

II. Status Mapping