Configure: Splunk Webhook

Data types available from Splunk Webhook


https://cdn2.hubspot.net/hubfs/3048294/eventsFnl@1x.png

  1. Select data types (source supported data types will automatically be available in the UI; ensure Destination can ingest chosen data types

  2. Collector (Source Mediator)
    1. Event Data Type (Source)

  3. Distributors (Destination Mediator)
    1. Event Data Type (Destination)

  4. Select Continue

Screen Shot 2019-09-03 at 12.22.12 PM.png

Configure Source Events

  1. Specify the field mappings from the splunk query results to what is needed in the destination. 

Screen Shot 2019-09-03 at 12.26.44 PM.png

Click here to return to Step-by-Step Configuration Guide


 

  • 23.1.02
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*