zulip

Commit Graph

Author	SHA1	Message	Date
Eeshan Garg	9d79becc0e	webhooks/splunk: Improve message formatting and punctuation.	2019-04-17 16:22:43 -07:00
Steve Howell	ced4d81856	Sweep tests for expected_subject -> expected_topic. This is all in the webhooks tests, including some docs for how to write those tests.	2018-11-12 15:47:11 -08:00
Aditya Bansal	64ddfc6ac0	zerver/webhooks: Change use of typing.Text to str.	2018-05-10 14:19:49 -07:00
Preston Hansen	e168f9938c	tests: Refactor use of test and webhook data fixtures.	2018-04-19 21:50:29 -07:00
Tim Abbott	73a668e7ae	python: Sort imports in webhooks.	2017-11-15 15:43:10 -08:00
rht	969cc506d2	zerver/webhooks: Use python 3 syntax for typing. Tweaked by tabbott to fix various line-wrapping issues.	2017-11-04 19:40:32 -07:00
Eeshan Garg	dded73ec6f	webhooks: Stop overriding build_webhook_url for URL query parameters.	2017-04-21 22:06:11 -02:30
Feorlen	e0acdfde0d	Add a Splunk webhook integration. Add a webhook to create messages from Splunk search alerts. The search alert JSON includes the first search result and a link to view the full results. The following fields are used: * search_name - the name of the saved search * results_link - URL of the full search results * host - the host the search result came from * source - the source file on that host * _raw - the raw text of the logged event. The Zulip message contains: * search name * host * source * raw The destination stream and message topic are configurable: the default stream is "splunk" and the default topic "Splunk Alert". If the topic is not provided in the URL, the search name is used instead (truncated if too long. If a needed field is missing, a default value is used instead. Example: "Missing source" It is possible to configure a Splunk search to not include some values, so I've provided defaults rather than return an error for missing data. In practice, these fields are unlikely to be deliberately suppressed. Note: alerts are only available for Splunk servers using a valid trial, developer, or paid license. I've added tests for the normal case of one search result, the topic from the search name, and for a search missing one of the fields used. Tested using Splunk Enterprise 6.5.1. Fixes #3477	2017-03-07 21:48:26 -08:00

8 Commits