Introduction to the Entuity Splunk integration

The Entuity Splunk integration allows you to forward events and incidents to Splunk, so that you can:

• use Splunk's capability to maintain longer-term history of events.
• search through large volumes of event data.
• search events over time to help you answer operational and business issues in real time.

Events and incidents are forwarded via the HttpEventCollector in Splunk, requiring either an Event Rule (for events) or an Event Trigger (for incidents). The information is then displayed in a specific Entuity dashboard in the Splunk UI that display the following:

• events raised vs time.

Please see this article for help and information on how to forward events and incidents from Entuity to Splunk.