Documentation > Splunk > Developing Dashboards, Views, and Apps for Splunk Web > Live Splunk Integrations to other Apps

Developing Dashboards, Views, and Apps for Splunk Web

 


Start Here
Command Line Interface
SOAP API
Bundles
Modules
Skins
Workflow Integration
Search Language
Built-In Processors

Live Splunk Integrations to other Apps

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

Contents

Live Splunk Integrations to other Apps

Live Splunks can be configured to notify other applications in via script, RSS or email, and to optionally include the search results. Report Splunks can include a full report table.


RSS

RSS feeds use the format shown below. The link value is a permalink URL to run the Live Splunk now on the server. 


<?xml version="1.0"?>
<rss version="2.0">
    <channel>
        <title>test</title>
        <link>http:qa-fc4:8000/?events?q=meta%3a%3aall%20</link>
        <description>Live,Splunk Feed for live splunk test</description>
        <item>
            <title>Query run from 0 To 1134079839</title>
            <link>http:qa-fc4:8000/?events?q=meta%3a%3aall%20%20starttimeu%3a%3a0%20endtimeu%3a%3a1134079839</link>
            <description> The Number of Events (1000) was Greater Than 1.</description>
            <pubDate>1134079840</pubDate>
        </item>
    </channel>
</rss>

Shell Script

The splunkd process will run a configured alert script and pass it these parameters.


Email

Alert messages use the format below. Outbound SMTP must be enabled on the Splunk Server's host. 


From: livesplunk@splunk.enet.interfoo.net (Joe Admin)
Date: November 16, 2005 3:19:23 PM PST
To: admin-list@interfoo.net
Subject: alert if fewer than 10.
Live Splunk http:splunk.enet.interop.net:8000/?events?q=7%318989%32500%20m%69%6e%75t%65sago
%3a%3a%310%20doma%69%6e%3a%3ad%65fa%75%6ct%20 triggered with the result :
The Number of Events (0) was Less Than 10.
Splunk Name : calls home last 10 minutes
Query Terms : 7189892500 minutesago::10 index::default
Auto-generated by Splunk Professional
Retrieved from "http://docs.splunk.com/Documentation/Splunk/2.2.3/Developer/LiveSplunkIntegrationsToOtherApps"

This documentation applies to the following versions of Splunk: 2.1 , 2.2 , 2.2.1 , 2.2.3 , 2.2.6 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!