Skip to content

Commit e1b5738

Browse files
author
Rudy
committed
Splunk documentation| First draft
1 parent 263d864 commit e1b5738

File tree

2 files changed

+39
-0
lines changed

2 files changed

+39
-0
lines changed

content/integrations/index.html

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -79,6 +79,7 @@
7979
* <a href="/integrations/riak/">Riak</a>
8080
* <a href="/integrations/rss/">RSS</a>
8181
* <a href="/integrations/solr/">Solr</a>
82+
* <a href="/integrations/splunk/">Splunk</a>
8283
* <a href="/integrations/sqlserver/">SQL Server</a>
8384
* <a href="/integrations/system/">System Integrations</a>
8485
* <a href="/integrations/varnish/">Varnish</a>

content/integrations/splunk.html

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
title: Datadog-Splunk Integration
3+
sidebar:
4+
nav:
5+
- header: Integrations
6+
- text: Back to Overview
7+
href: "/integrations/"
8+
---
9+
10+
11+
<div id="int-overview">
12+
<h3>Overview</h3>
13+
14+
Connect your Splunk log monitoring to be able to:
15+
<ul>
16+
<li> Get notified of your reports. </li>
17+
<li> Correlate these reports with your other metrics</li>
18+
<li> Collaborate with your team on thse events </li>
19+
</ul>
20+
</div>
21+
22+
23+
<p>To receive your reports from Splunk into Datadog, you need to have <code>dogapi</code> installed</p>
24+
<p><pre class="linux"><code>pip install dogapi</code></pre></p>
25+
26+
<p>Once it is done, <a href="https://app.datadoghq.com/account/settings#api">get your api key and an application key </a>and drop the following
27+
<code>dog-splunk.sh</code> script into $SPLUNK_HOME/bin/scripts</p>
28+
<p>
29+
<pre class="linux"><code>#!/bin/bash
30+
API_KEY= your_api_key
31+
APP_KEY= your_application_key
32+
dog --api-key $API_KEY --application-key $APP_KEY event post \
33+
"Found $SPLUNK_ARG_1 events in splunk" \
34+
"Matching $SPLUNK_ARG_2 based on $SPLUNK_ARG_5, from report $SPLUNK_ARG_4. More details at $SPLUNK_ARG_6." \
35+
--aggregation_key $SPLUNK_ARG_3 --type splunk</code></pre>
36+
</p>
37+
38+
<p> You can now configure your splunk reports to exectue this script in order to get published into Datadog</p>

0 commit comments

Comments
 (0)