Threat Stack integration for Splunk On-Call
Configure the Threat Stack integration for Splunk On-Call.
The following guide walks you through the steps needed to integrate your Threat Stack alerts into the Splunk On-Call timeline.
Requirements
This integration is compatible with the following versions of Splunk On-Call:
-
Starter
-
Growth
-
Enterprise
Splunk On-Call configuration
From the Splunk On-Call web portal, select .
Select the Threat Stack Integration.
Turn on the integration and copy the service API endpoint to the clipboard.
Threat Stack configuration
From the main Threat Stack screen, select . Select the Splunk On-Call integration.
Enter a name and description for the integration, then paste in the URL you copied from Splunk On-Call.
Select the alert severity you want to send to Splunk On-Call.
This completes the integration process.