zulip/zerver/webhooks/splunk/doc.md

Zulip Splunk integration

See your Splunk Search alerts in Zulip!

{start_tabs}

1. {!create-channel.md!}

2. {!create-an-incoming-webhook.md!}

3. {!generate-webhook-url-basic.md!}

   !!! tip ""

    If you do not specify a topic, the name of the search will be used
    as the topic (truncated if it's too long).
   

4. In the Splunk search app, execute the search you'd like to be notified about. Click on Save As in the top-right corner, and select Alert.

5. Configure the Settings and Trigger Conditions for your search as appropriate. Under Trigger Actions, click Add Actions, and select Webhook. Set URL to the URL generated above, and click Save.

!!! tip ""

You can create as many search alerts as you like, with whatever
channel and topic you choose. Just generate the webhook URL as
appropriate for each one.

{end_tabs}

{!congrats.md!}

Related documentation

{!webhooks-url-specification.md!}