The incident management platform Splunk On-Call handles the distribution of messages from dozens of different sources, which can be selected as integrations directly in the web interface. A generic REST API back-end is available for Checkmk.
1. Configuring Splunk On-Call
You do not need to explicitly activate the notifications from Checkmk, only the REST API endpoint address:
In Splunk On-Call under Integrations, call the REST Generic item.
Copy the displayed REST API endpoint URL.
2. Configuring Checkmk
You have already learned how to set up Checkmk notifications in general in the article on notifications.
In Checkmk it is now sufficient to specify the URL copied above:
Create a new notification rule with Setup > Events > Notifications > Add rule.
For the Notification Method choose Splunk On-Call.
-
Enter the copied URL under REST Endpoint URL:
Instead of entering the URL directly here, you can also read it from the password store - provided it was previously stored there.
Optionally, you may specify URL prefixes to control links on your Checkmk GUI within the notification.
When using the following Contact selection box, note the following two points:
When selecting contacts, make sure that the notifications are only sent to one contact, e.g. by selecting a single user. With the notification methods for ticket systems etc., the contact selection only serves to specify that notifications are sent. However, the notifications are not sent to the selected user, but to the ticket system. Note that a contact selection via contact groups, all contacts of an object or similar usually generates several identical notifications for an event, which then end up in the ticket system twice, three times or even more often.
If the first point is fulfilled, but the user is used in several notification rules for the same method, then only the last rule applies in each case. It is therefore advisable to create a separate functional user for each of these notification rules.
You can find out how to test the new notification method in the article on notifications.