Opsgenie/Splunk integration

[Alexey SHALYGIN]

Hello,

I’d like to know if anyone was able to integrate OpsGenie with the last version of Splunk (7.2.*).

We use Splunk 7.2.5 and Splunk Enterprise Security 5.2.2 and we’d like to automatically create an alert in OpsGenie whenever an alert is created in Splunk.

We've installed OpsGenie Splunk app, but it looks pretty obsolete (last version published Oct. 31, 2017) and doesn’t seem to work correctly:

• In Splunk you can add OpsGenie as a response action, but you can’t manage any detail, like alert priority, etc.

• In Splunk Enterprise Security there is no OpsGenie action in the response action list at all.

Do you have any advice for us?

Thanks for the help.

Alex.

[Samir · Accepted solution]

Hi Alex - It looks like the Opsgenie app has not been officially "approved" to work on Splunk v7.2.5, but we should be able to get it to work with that version. If you can reach out to our support team either through the in-app chat support (blue bubble in bottom right corner when logged into Opsgenie), or by submitting a ticket to us at https://support.atlassian.com/ or emailing support@opsgenie.com, we should be able to work with you on getting it setup.

[Alexey SHALYGIN]

Hello Samir,

Actually, I'm already in contact with support team, but it looks like they have some difficulties to reach the engineering team. I've asked the same question back in February and make a recall every ~2 weeks, but unfortunately we wasn't able to make any progress with support.

I'll try to submit a ticket at https://support.atlassian.com/

Thanks for the help.

[Brad Collins]

You can try reaching out ZigiWave, as they're having a lot of integrations as far as I remember. Their website is https://zigiwave.com. GL!

[Alexey SHALYGIN]

Hello Brad,

Appreciate your help!

ZigiWave provide integration with Splunk, but not with the Splunk Enterprise Security. With Atlassian support we were able to find a way to synchronise OpsGenie with Splunk 7.2.*; not the easiest one, but it works. Unfortunately, it's still impossible to synchronise OpsGenie with Enterprise Security (which was our main wish).

[Brad Collins]

Thanks for the update Alexey. I'm glad that you were able to achieve this even if not in the easiest way.

[Alexey SHALYGIN]

.