Rollbar integration for Splunk On-Call

Configure the Rollbar integration for Splunk On-Call.

Use the Rollbar integration for Splunk On-Call to send your Rollbar notification directly to the Splunk On-Call timeline. Follow these steps to get the integration implemented.

Implementation steps

  1. From Rollbar, select Settings from the top of your screen, and then Notifications from the left-side bar.

  2. Under Available Channels select VictorOps.

  3. You will then be presented with 2 input boxes. One for API Key and one for Routing Key, both of which can be found in the Splunk On-Call interface.

In Splunk On-Call, select Integrations and then Rollbar. If the integration has not yet been configured, select Enable Integration to generate your endpoint URL. Be sure to replace the $routing_key section with the actual routing key you intend to use.

Resolve via Splunk On-Call

Note: This feature requires the Full-Stack features set in order to access Custom outbound webhooks in Splunk On-Call.

Recoveries in Splunk On-Call can be passed to Rollbar as a resolve. To do this, an access token from Rollbar is needed to leverage the API. This token can be found under Settings and then Menu options. Copy the value of the post_client_item.

  1. In Splunk On-Call, navigate to Integrations, and then Outgoing Webhooks.

  2. Select Add Webhooks. Use the following values for your configuration and be sure to replace the access token with value copied from Rollbar.

    • Incident-Resolved

    • PATCH

    • application/json

    • https://api.rollbar.com/api/1/item/${{ALERT.rollbar_item_id}}?access_token=YOUR_ACCESS_TOKEN_HERE

    • {“status”:“resolved”}

In the end, your webhook should look like the following image: