Developer CertificationREST API

Example with Splunk

This page provides a step by step guide on how to create a webhook to receive alerts from Splunk into your Symphony Messaging chats.

Symphony Messaging setup

We assume here that the Admin has already configured the Universal Webhook app and bot, see the Installation guide for more details.

Step 1

Add the Universal Webhook Bot to the chat room where Splunk alerts should be forwarded.

Step 2

Configure the webhook, by clicking on the Universal Webhook icon in the header of your chat room, then clicking on Add a webhook.

Configure the webhook as described below. You may want to adapt the Template to customize it to your needs.

  1. Webhook name: My Splunk alert

  2. Webhook type: JSON

  3. Template. Set the template as defined below. You may want to adapt the template though, as it assumes for example that the data sent by Splunk will include a host property in the results. Contact your Splunk admin to get the list of properties you can get access to.

  1. Set the Security type to Unauthenticated. As of today, it appears that Splunk does not support authentication for Webhooks natively. If authentication is required for your workflow, please contact Splunk support to learn more.

  2. Click Save and Activate. You can click "Copy" to automatically save the webhook URL in your clipboard.

Your webhook is now successfully configured in Symphony Messaging.

Splunk setup

In Splunk, define an alert with a webhook action, and paste the Symphony Messaging webhook URL copied in the previous step.

Finalise the creation of your alert in Splunk.

The configuration of your webhook is completed: Anytime that your alert will be triggered, the Universal Webhook Bot will post a message in your chat room.

Last updated

Was this helpful?