__ __
.-----..--.--..-----.| |--.|_ `.
| _ || | ||__ --|| | \ \
| __||_____||_____||__|__| _/ /
|__| |__,'
Push notifications for splunk
This application provides integration with third party gateways for push notifications like SMS.
Supported gateways/protocols:
- Twilio/SMS - http://www.twilio.com/sms/
++ Twilio gateway setup
1) Create an account @ https://www.twilio.com/try-twilio
2) Follow the instructions for activating your demo app
3) Edit the twilio stanza found in push/default/gateway.conf with your twilio account settings.
NOTE:
* PLEASE READ the "GET STARTED IN THREE STEPS" "TRY IT" paragraph @ https://www.twilio.com/user/account
** When using the demo app, the to_number is limited to the number of the phone you activated your demo account with.
*** Make sure the from_number matches the "Number" found in your Twilio sandbox
4) Restart splunk for the new settings to apply:
splunk restart
5) Goto the main search UI and run the following search to test if your settings are correct:
index=_internal | head 1 | pushsms to_number="XXXXXXXXXX" message="hello world"
NOTE:
* Error messages having a twilio.com URL's are really useful for debugging configuration problems.
** You can always use Splunk to further debug configuration problems using the saved search "Push Debug"
available in the main search UI under "Searches & Reports" OR http://YOURHOST:YOURPORT/app/search/flashtimeline?s=Push%20Debug
# Alert Example Configuration:
# $SPLUNK_HOME/etc/local/savedsearches.conf
[HTTP big trouble SMS]
action.email.reportServerEnabled = 0
alert.severity = 2
alert.suppress = 1
alert.suppress.period = 5m
alert.track = 1
counttype = number of events
cron_schedule = * * * * *
dispatch.earliest_time = rt-5m
dispatch.latest_time = rt
displayview = flashtimeline
enableSched = 1
quantity = 0
relation = greater than
request.ui_dispatch_view = flashtimeline
search = source="*access.log" status="500"
action.pushsms = 1
action.pushsms.message = Something bad happened in HTTP land
action.pushsms.to_number = 9999999999