{"action":"created","comment":{"url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/comments/41853614","id":41853614,"diff_hunk":"@@ -0,0 +1,58 @@\n+---\n+layout: integration \n+title: \"Splunk (6.3 and up)\"\n+draft: false\n+type: \"Log Aggregation\"\n+\n+---\n+\n+#### Setting up the BigPanda App for Splunk\n+\n+**Note:** One thing to note before integrating Splunk with BigPanda:\n+\n+<!-- docs-only-start -->\n+{: .not-responsive}\n+Unlike other monitoring systems Splunk incidents will not resolve automatically because Splunk does not send notifications when alerts are resolved. Resolve Splunk incidents manually by clicking the resolve button (![media/resolve.png](/media/resolve.png)) in the incident.\n+<!-- docs-only-end -->\n+<!-- app-only-start -->\n+Unlike other monitoring systems Splunk incidents will not resolve automatically because Splunk does not send notifications when alerts are resolved. Resolve Splunk incidents manually by clicking the resolve button (![media/resolve.png](/media/resolve.png)) in the incident.\n+<!-- app-only-end -->\n+\n+1. In the Splunkbase app store, search for **BigPanda** and download the app for **BigPanda App for Splunk**.\n+\n+2. Log in to Splunk 6.3 as an administrator.\n+\n+3. Go to **Settings...Alert Actions (under Knowledge)**.\n+\n+4. In the list of alert actions, find the alert action for BigPanda.\n+\n+5. In the **Setup** column, click the link for **Setup bigpanda_alerts**.\n+\n+6. In the setup screen, populate the following fields:\n+\n+  * Enter `$TOKEN` into the **API Token** field in Splunk.\n+\n+  * Enter `$STREAM_ID` into the **App Key** field in Splunk.\n+\n+**Note:** The **API URL** is populated automatically in Splunk. Do not change this field value.\n+\n+<!-- section-separator -->\n+\n+#### Set up **Trigger Actions** for the alerts you want to send to BigPanda.\n+\n+For example:\n+\n+1. Run a **Search, Save As > Alert**.\n+\n+2. At the bottom of the window, click **+Add Actions**, and then select **BigPanda**.\n+\n+  When the alert is triggered in Splunk, it is sent to BigPanda.\n+\n+Optionally, if you have more than one BigPanda Splunk integration, you can override the App Key here (Enter `$STREAM_ID`).\n+\n+In addition, you can override the description, primary and secondary property of the alert.","path":"_integrations/splunk-6-3-and-up.md","position":53,"original_position":53,"commit_id":"a420b4241613deed01f90afc3546e41b65c71ed5","original_commit_id":"a420b4241613deed01f90afc3546e41b65c71ed5","user":{"login":"erikzaadi","id":77775,"avatar_url":"https://avatars.githubusercontent.com/u/77775?v=3","gravatar_id":"","url":"https://api.github.com/users/erikzaadi","html_url":"https://github.com/erikzaadi","followers_url":"https://api.github.com/users/erikzaadi/followers","following_url":"https://api.github.com/users/erikzaadi/following{/other_user}","gists_url":"https://api.github.com/users/erikzaadi/gists{/gist_id}","starred_url":"https://api.github.com/users/erikzaadi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erikzaadi/subscriptions","organizations_url":"https://api.github.com/users/erikzaadi/orgs","repos_url":"https://api.github.com/users/erikzaadi/repos","events_url":"https://api.github.com/users/erikzaadi/events{/privacy}","received_events_url":"https://api.github.com/users/erikzaadi/received_events","type":"User","site_admin":false},"body":"The UI for configuring alert has two states, the initial:\r\n![image](https://cloud.githubusercontent.com/assets/77775/10453449/ca562c28-71b4-11e5-88c0-bb1f0792ceaa.png)\r\nWhere the advanced is collapsed, and \r\n![image](https://cloud.githubusercontent.com/assets/77775/10453466/e2b3f8cc-71b4-11e5-9928-c11fc034c038.png)\r\nwhen the advanced section is toggled","created_at":"2015-10-13T11:16:04Z","updated_at":"2015-10-13T11:16:04Z","html_url":"https://github.com/bigpandaio/docs.bigpanda.io/pull/27#discussion_r41853614","pull_request_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/27","_links":{"self":{"href":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/comments/41853614"},"html":{"href":"https://github.com/bigpandaio/docs.bigpanda.io/pull/27#discussion_r41853614"},"pull_request":{"href":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/27"}}},"pull_request":{"url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/27","id":47519590,"html_url":"https://github.com/bigpandaio/docs.bigpanda.io/pull/27","diff_url":"https://github.com/bigpandaio/docs.bigpanda.io/pull/27.diff","patch_url":"https://github.com/bigpandaio/docs.bigpanda.io/pull/27.patch","issue_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues/27","number":27,"state":"open","locked":false,"title":"Splunk 6.3","user":{"login":"erikzaadi","id":77775,"avatar_url":"https://avatars.githubusercontent.com/u/77775?v=3","gravatar_id":"","url":"https://api.github.com/users/erikzaadi","html_url":"https://github.com/erikzaadi","followers_url":"https://api.github.com/users/erikzaadi/followers","following_url":"https://api.github.com/users/erikzaadi/following{/other_user}","gists_url":"https://api.github.com/users/erikzaadi/gists{/gist_id}","starred_url":"https://api.github.com/users/erikzaadi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erikzaadi/subscriptions","organizations_url":"https://api.github.com/users/erikzaadi/orgs","repos_url":"https://api.github.com/users/erikzaadi/repos","events_url":"https://api.github.com/users/erikzaadi/events{/privacy}","received_events_url":"https://api.github.com/users/erikzaadi/received_events","type":"User","site_admin":false},"body":"Still in progress","created_at":"2015-10-13T11:13:10Z","updated_at":"2015-10-13T11:16:04Z","closed_at":null,"merged_at":null,"merge_commit_sha":"258215074c60b094cfc3aa3ef209c784d80aa423","assignee":null,"milestone":null,"commits_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/27/commits","review_comments_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/27/comments","review_comment_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/comments{/number}","comments_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues/27/comments","statuses_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/statuses/a420b4241613deed01f90afc3546e41b65c71ed5","head":{"label":"bigpandaio:feature/splunk_tng","ref":"feature/splunk_tng","sha":"a420b4241613deed01f90afc3546e41b65c71ed5","user":{"login":"bigpandaio","id":3153466,"avatar_url":"https://avatars.githubusercontent.com/u/3153466?v=3","gravatar_id":"","url":"https://api.github.com/users/bigpandaio","html_url":"https://github.com/bigpandaio","followers_url":"https://api.github.com/users/bigpandaio/followers","following_url":"https://api.github.com/users/bigpandaio/following{/other_user}","gists_url":"https://api.github.com/users/bigpandaio/gists{/gist_id}","starred_url":"https://api.github.com/users/bigpandaio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bigpandaio/subscriptions","organizations_url":"https://api.github.com/users/bigpandaio/orgs","repos_url":"https://api.github.com/users/bigpandaio/repos","events_url":"https://api.github.com/users/bigpandaio/events{/privacy}","received_events_url":"https://api.github.com/users/bigpandaio/received_events","type":"Organization","site_admin":false},"repo":{"id":22320671,"name":"docs.bigpanda.io","full_name":"bigpandaio/docs.bigpanda.io","owner":{"login":"bigpandaio","id":3153466,"avatar_url":"https://avatars.githubusercontent.com/u/3153466?v=3","gravatar_id":"","url":"https://api.github.com/users/bigpandaio","html_url":"https://github.com/bigpandaio","followers_url":"https://api.github.com/users/bigpandaio/followers","following_url":"https://api.github.com/users/bigpandaio/following{/other_user}","gists_url":"https://api.github.com/users/bigpandaio/gists{/gist_id}","starred_url":"https://api.github.com/users/bigpandaio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bigpandaio/subscriptions","organizations_url":"https://api.github.com/users/bigpandaio/orgs","repos_url":"https://api.github.com/users/bigpandaio/repos","events_url":"https://api.github.com/users/bigpandaio/events{/privacy}","received_events_url":"https://api.github.com/users/bigpandaio/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/bigpandaio/docs.bigpanda.io","description":"BigPanda Documentation","fork":false,"url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io","forks_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/forks","keys_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/teams","hooks_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/hooks","issue_events_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues/events{/number}","events_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/events","assignees_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/assignees{/user}","branches_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/branches{/branch}","tags_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/tags","blobs_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/statuses/{sha}","languages_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/languages","stargazers_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/stargazers","contributors_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/contributors","subscribers_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/subscribers","subscription_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/subscription","commits_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/contents/{+path}","compare_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/merges","archive_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/downloads","issues_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues{/number}","pulls_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls{/number}","milestones_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/milestones{/number}","notifications_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/labels{/name}","releases_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/releases{/id}","created_at":"2014-07-27T20:02:29Z","updated_at":"2015-07-02T19:31:23Z","pushed_at":"2015-10-13T11:13:11Z","git_url":"git://github.com/bigpandaio/docs.bigpanda.io.git","ssh_url":"git@github.com:bigpandaio/docs.bigpanda.io.git","clone_url":"https://github.com/bigpandaio/docs.bigpanda.io.git","svn_url":"https://github.com/bigpandaio/docs.bigpanda.io","homepage":"https://docs.bigpanda.io","size":9160,"stargazers_count":1,"watchers_count":1,"language":"CSS","has_issues":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":1,"mirror_url":null,"open_issues_count":3,"forks":1,"open_issues":3,"watchers":1,"default_branch":"develop"}},"base":{"label":"bigpandaio:develop","ref":"develop","sha":"119df5972f5c501efceb5e1f67bf1e5779bc7451","user":{"login":"bigpandaio","id":3153466,"avatar_url":"https://avatars.githubusercontent.com/u/3153466?v=3","gravatar_id":"","url":"https://api.github.com/users/bigpandaio","html_url":"https://github.com/bigpandaio","followers_url":"https://api.github.com/users/bigpandaio/followers","following_url":"https://api.github.com/users/bigpandaio/following{/other_user}","gists_url":"https://api.github.com/users/bigpandaio/gists{/gist_id}","starred_url":"https://api.github.com/users/bigpandaio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bigpandaio/subscriptions","organizations_url":"https://api.github.com/users/bigpandaio/orgs","repos_url":"https://api.github.com/users/bigpandaio/repos","events_url":"https://api.github.com/users/bigpandaio/events{/privacy}","received_events_url":"https://api.github.com/users/bigpandaio/received_events","type":"Organization","site_admin":false},"repo":{"id":22320671,"name":"docs.bigpanda.io","full_name":"bigpandaio/docs.bigpanda.io","owner":{"login":"bigpandaio","id":3153466,"avatar_url":"https://avatars.githubusercontent.com/u/3153466?v=3","gravatar_id":"","url":"https://api.github.com/users/bigpandaio","html_url":"https://github.com/bigpandaio","followers_url":"https://api.github.com/users/bigpandaio/followers","following_url":"https://api.github.com/users/bigpandaio/following{/other_user}","gists_url":"https://api.github.com/users/bigpandaio/gists{/gist_id}","starred_url":"https://api.github.com/users/bigpandaio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bigpandaio/subscriptions","organizations_url":"https://api.github.com/users/bigpandaio/orgs","repos_url":"https://api.github.com/users/bigpandaio/repos","events_url":"https://api.github.com/users/bigpandaio/events{/privacy}","received_events_url":"https://api.github.com/users/bigpandaio/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/bigpandaio/docs.bigpanda.io","description":"BigPanda Documentation","fork":false,"url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io","forks_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/forks","keys_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/teams","hooks_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/hooks","issue_events_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues/events{/number}","events_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/events","assignees_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/assignees{/user}","branches_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/branches{/branch}","tags_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/tags","blobs_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/statuses/{sha}","languages_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/languages","stargazers_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/stargazers","contributors_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/contributors","subscribers_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/subscribers","subscription_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/subscription","commits_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/contents/{+path}","compare_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/merges","archive_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/downloads","issues_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues{/number}","pulls_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls{/number}","milestones_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/milestones{/number}","notifications_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/labels{/name}","releases_url":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/releases{/id}","created_at":"2014-07-27T20:02:29Z","updated_at":"2015-07-02T19:31:23Z","pushed_at":"2015-10-13T11:13:11Z","git_url":"git://github.com/bigpandaio/docs.bigpanda.io.git","ssh_url":"git@github.com:bigpandaio/docs.bigpanda.io.git","clone_url":"https://github.com/bigpandaio/docs.bigpanda.io.git","svn_url":"https://github.com/bigpandaio/docs.bigpanda.io","homepage":"https://docs.bigpanda.io","size":9160,"stargazers_count":1,"watchers_count":1,"language":"CSS","has_issues":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":1,"mirror_url":null,"open_issues_count":3,"forks":1,"open_issues":3,"watchers":1,"default_branch":"develop"}},"_links":{"self":{"href":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/27"},"html":{"href":"https://github.com/bigpandaio/docs.bigpanda.io/pull/27"},"issue":{"href":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues/27"},"comments":{"href":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/issues/27/comments"},"review_comments":{"href":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/27/comments"},"review_comment":{"href":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/pulls/27/commits"},"statuses":{"href":"https://api.github.com/repos/bigpandaio/docs.bigpanda.io/statuses/a420b4241613deed01f90afc3546e41b65c71ed5"}}}}