Loggly integration for Splunk On-Call

Configure the Loggly integration for Splunk On-Call.

Loggly provides cloud-based solutions for log management, allowing users to spot problems in real time and identify root causes.

Requirements

This integration is compatible with the following versions of Splunk On-Call:

  • Starter

  • Growth

  • Enterprise

Configuration

  1. Activate the Email Endpoint integration under Settings, then Alert Behavior, then Integrations, then Loggly.

    image1

  2. Select Enable Integration.

    image2

  3. Copy the email address.

    image3

  4. From the Loggly dashboard, select your user icon and then Account.

    loggly2

  5. Go to the Users tab and select Add New.

    loggly3
  6. Name the user and paste the email address you generated in as the user’s email address, then select Submit.

    loggly4
  7. Go to Alerts and either edit an existing alert or create a new one.

    loggly5

  8. Since the Name of the alert appears in the email subject, enter an appropriate value.

  9. Check Send an email and add the Splunk On-Call email address. Make sure the alert is activated, then select Submit.

Whenever the search criteria matches, an incident is posted in your Splunk On-Call timeline.