Your Canary Console is capable of posting incidents from your Canaries to an instance of Splunk that you control. We've made this feature more granular, and you can now specify an HEC URL per flock.
Note: This guide assumes your Splunk HEC is configured, if not, kindly follow our documentation here.
If you run into any hurdles, or have any questions on the setup process, feel free to reach out to our support team: support@canary.tools
Setup steps for your Console.
Log-in to your Console and select the Flock you'd like configured.
Head over to your flock settings, using the gear icon to the top right.
Switch the Webhook toggle from Global to On. This configures the flock to use it's own Webhook settings, rather than matching the global settings.
Input your HEC URL, Port and HEC Token in the appropriate fields as shown below. Finally, select Add Webhook when complete.
Click on Save when complete.
You're all set! Alert data will now be sent into your Splunk instance.
