Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Integrating Splunk with Openpath Avigilon Alta lets you forward event data (entry, input, reader, relay, and lockdown events) from Openpath Avigilon Alta to Splunk.

First, set up a token in Splunk

  1. Go to Data Inputs.

Iframe
allowfullscreentrue
srchttps://info.openpath.com/hubfs/images/kustomer-articles/splunk-data-inputs.png
width200
frameborderhide
titleData Inputs
alignmiddle
height90
longdescSplunk Data Inputs

...

Iframe
allowfullscreentrue
srchttps://info.openpath.com/hubfs/images/kustomer-articles/splunk-view-input.png
width700
frameborderhide
titleView Input
alignmiddle
height60
longdescSplunk View Input

Next, create a rule in

...

Avigilon Alta

  1. Go to https://control.openpath.com/login and log in. To access the European Partner Center, please go to https://control.eu.openpath.com/login.

  2. Go to Configurations > Rules.

...

4. Enter a name and description for the rule, then select a Trigger Type and Event that you want to forward to Splunk.

true
Iframe
allowfullscreen
srchttps://info.openpath.com/hubfs/Openpath/images/kustomer-articles/splunk-edit-ruleintegration.png
width700
frameborderhide
titleedit ruleSplunk
alignmiddle
height305475
longdescEdit RuleSplunk integration

5. Click Check the Use JSON Editoreditor box in the lower right corner, copy the JSON below, and paste it over the "requests" section of the rule, using your Splunk token and URL where indicated.

Iframe
allowfullscreentrue
srchttps://info.openpath.com/hubfs/images/kustomer-articles/use-json.png
width200
frameborderhide
titleuse json
alignmiddle
height109
longdescEdit JSON

Code Block

  "requests": [
    {
      "type": "http",
      "httpParams": {
        "headers": [
          "User-Agent: Openpath/Rules Engine",
          "Content-Type: application/json",
          "Authorization: Splunk YOUR SPLUNK TOKEN"
        ],
        "method": "post",
        "url": "http://YOUR URL/services/collector/event",
        "body": "{\"event\": {{json event}} }"
      }
    }
  ]
}

View the data in Splunk

Search for the Openpath Avigilon Alta data in the index you selected previously.

...