Splunk Streaming Integration

Innovation Overview

ThousandEyes has introduced the ability to configure streaming integrations to a Splunk HTTP Event Collector (HEC) directly from the Integrations section within the ThousandEyes platform. Previously, this capability could only be managed via the ThousandEyes public API, but now users can set up the same integration in an easy-to-walk-through UI.

Feature Highlights:

• Dedicated Splunk Connector: Integration 2.0 allows users to select the connector specific to Splunk Cloud Platform or Splunk Enterprise, including the format of the target URL, saving customers from having to determine it on their own.

• Easy Data Selection: Splunk Enterprise, Splunk Cloud Platform operation allows users to select the available Network & App tests and Endpoint tests from the drop-down list, instead of relying on the test IDs which users need to pull separately via API. 

• Integration Testing: During the setup of a Splunk HEC integration, users can verify the configuration's functionality. This includes ensuring the Splunk HEC endpoint URL is valid and reachable from the ThousandEyes platform, as well as confirming the validity of the provided HEC token.

Customer Benefits:

• Seamless Data Integration: This UI capability allows users to easily stream test results to Splunk HEC, helping them assure their users’ experience with ease and confidence. The ability to test integrations during setup further ensures reliability and minimizes the risk of misconfiguration.

Here is a quick demo of how to create a Splunk streaming integration:

1. In the ThousandEyes platform, go to Integrations > Integrations 2.0.

2. Click + New Connector to select the type of connector to configure.

3. Click Splunk Cloud Platform HEC or Splunk Enterprise HEC, depending on your target.

4. Fill out the Connector configuration form with a name, target, and token. 

5. Click Save & Assign Operation to save the connector. 

6. In the Manage Operations dialog, click + New Operation

7. Fill out the Operation configuration form, providing a name and choosing what data is streamed by selecting tests or tags. Optionally, you can configure the Splunk Index, Source, and Source Type. 

8. Click Test at the bottom of the configuration form to test the connection to your target and ensure it is configured correctly. 

9. Click Save to complete the creation of the integration.

10. Navigate to your Splunk instance to view the ThousandEyes streaming test data.