Experience Center
Splunk Webhook Configuration Guide
This guide provides information on configuring webhooks using Splunk Enterprise for alerts in Digital Experience Monitoring. The instructions provide a sample configuration that can be enhanced, depending on user requirements.
Setting Up Webhooks in the Splunk Enterprise Instance
After your Splunk Enterprise instance has been installed and is running, follow this sequence to create webhooks:
- Log in to your instance. The home page is displayed.
- In the top-right corner of the page, click Settings.
- Within the Data section, select Data inputs.
Configure HTTP Event Collector
Configure HTTP Event Collector (HEC) to receive data:
- Select HTTP Event Collector from the list of inputs.
- In the top-right corner of the page, click Global Settings.
- Configure the Global Settings as shown in the following example screen:
- Set All Tokens to Enabled.
- Set the Default Source Type to json.
- Leave the Default Index as Default.
- Leave the Default Output Group as None.
- Deselect the check boxes for Use Deployment Server and Enable SSL.
To learn more about configuring HTTP Event Collector, refer to Set up and use HTTP Event Collector in Splunk Web.
- Click Save.
Create a Token
Create a token to receive data:
- In the top-right corner of the page, click New Token.
- Enter a name for the token. Leave the remaining settings as shown on the following screen:
- Click Next.
- Configure any additional input settings, then click Review.
Your settings are displayed for review.
- Click Submit. A confirmation screen displays the created token.
- Highlight and copy the Token Value. The string will be used for Configuring Splunk Webhooks in Digital Experience Monitoring .
Configuring Splunk Webhooks in Digital Experience Monitoring
To configure webhooks in Digital Experience Monitoring:
- Go to Administration > Alerts > Webhooks.
- Click Add Webhook.
- In the Add Webhook window:
- Name: Enter a webhook name for Splunk.
- Status: Select Enabled to enable the webhook.
- URL: Include the following parameter in your URL:
isSplunk=true
- Authentication Type: Select either Basic or Token.
- For Basic, enter any string as the username, and enter the configured HEC Token Value from Create a Token as your password.
- For Token, enter the configured HEC Token Value from Create a Token as the Bearer Token.
- Click Save.
To learn more about configuring webhooks and testing your configuration, see Configuring Webhooks.