Integrating Splunk with Openpath Avigilon Alta lets you forward event data (entry, input, reader, relay, and lockdown events) from Openpath Avigilon Alta to Splunk.
First, set up a token in Splunk
...
highlight | false |
---|
highlightStyle | a11y-dark |
---|
...
Go to Data Inputs.
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/images/kustomer-articles/splunk-data-inputs.png |
---|
|
...
| width | 200 |
---|
frameborder | hide |
---|
title | Data Inputs |
---|
align | middle |
---|
height | 90 |
---|
longdesc | Splunk Data Inputs |
---|
|
2. Click HTTP Event Collector.
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/images/kustomer-articles/splunk-click-http.png |
---|
|
...
| width | 700 |
---|
frameborder | hide |
---|
title | event collector |
---|
align | middle |
---|
height | 223 |
---|
longdesc | HTTP Event Collector |
---|
|
3. Click New Token.
4. Enter a name and (optional) description for the token, then click Next.
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/images/kustomer-articles/splunk-name.png |
---|
|
...
| width | 700 |
---|
frameborder | hide |
---|
title | select name |
---|
align | middle |
---|
height | 403 |
---|
longdesc | Splunk select name |
---|
|
5. Select an Index to send the data to (or create a new one).
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/Openpath/images/kustomer-articles/splunk-select- |
---|
|
...
index.png | width | 700 |
---|
frameborder | hide |
---|
title | select index |
---|
align | middle |
---|
height | 338 |
---|
longdesc | Splunk Select Index |
---|
|
6. On the Data Inputs page, you'll see the new Token you just created.
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/images/kustomer-articles/splunk-view-input.png |
---|
|
...
| width | 700 |
---|
frameborder | hide |
---|
title | View Input |
---|
align | middle |
---|
height | 60 |
---|
longdesc | Splunk View Input |
---|
|
Next, create a rule in
...
Avigilon Alta
Go to https://control.openpath.com/login
...
and
...
log
...
in.
...
To
...
access
...
the
...
European
...
Partner
...
Center,
...
please
...
go
...
to
...
https://control.eu.openpath.com/login
...
.
...
Go
...
to
...
Configurations
...
>
...
Rules.
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/images/kustomer-articles/config-rules-engnie.png |
---|
|
...
| width | 200 |
---|
frameborder | hide |
---|
title | rules engine |
---|
align | middle |
---|
height | 88 |
---|
longdesc | Configuration Rules Engine |
---|
|
3. Click the plus(+) sign in the top right corner to Add a Rule.
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/images/kustomer-articles/add-rule.png |
---|
|
...
| width | 400 |
---|
frameborder | hide |
---|
title | add rule |
---|
align | middle |
---|
height | 337 |
---|
longdesc | Add Rule |
---|
|
4. Enter a name and description for the rule, then select a Trigger Type and Event that you want to forward to Splunk.
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/images/kustomer-articles/splunk-edit-rule.png |
---|
|
...
| width | 700 |
---|
frameborder | hide |
---|
title | edit rule |
---|
align | middle |
---|
height | 305 |
---|
longdesc | Edit Rule |
---|
|
5. Click Use JSON Editor, copy the JSON below, and paste it over the "requests" section of the rule, using your Splunk token and URL where indicated.
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/images/kustomer-articles/use-json.png |
---|
|
...
| width | 200 |
---|
frameborder | hide |
---|
title | use json |
---|
align | middle |
---|
height | 109 |
---|
longdesc | Edit JSON |
---|
|
Code Block |
---|
"requests": [
{
"type": "http",
"httpParams": {
"headers": [
"User-Agent: Openpath/Rules Engine",
"Content-Type: application/json",
"Authorization: Splunk YOUR SPLUNK TOKEN"
],
"method": "post",
"url": "http://YOUR URL/services/collector/event",
"body": "{\"event\": {{json event}} }"
}
}
]
}
|
View the data in Splunk
Search for the Openpath Avigilon Alta data in the index you selected previously.
...
Iframe |
---|
allowfullscreen | true |
---|
src | https://info.openpath.com/hubfs/images/kustomer-articles/splunk-view-data.png |
---|
|
...
| width | 700 |
---|
frameborder | hide |
---|
title | view data |
---|
align | middle |
---|
height | 543 |
---|
longdesc | Splunk View Data |
---|
|