Action Type: VictorOps (Splunk On-Call)

Security Requirements and Controls

  • Create actions permission

VictorOps Action is based on VictorOPs alerts supported by LogScale through the action system.

Important

LogScale provides a crowdstrike/logscale-splunk-on-call package which provides a template for a Splunk-on-call action, so you can customize elements of the actions.

Configure VictorOps Action

Figure 157. Configure VictorOps Action


  1. First, you need to create a Service in your VictorOps Account: go to VictorOps and follow the procedure described in VictorOps Integration Guide:

    1. Open Settings → Alert Behaviour → Integrations

    2. Select Humio in the list of integrations and select Enable Integration.

    3. Copy the Service API Endpoint URL to your clipboard.

    4. Make sure to replace the $routing_key section with the actual routing key you intend to use.

  2. Go to LogScale and create a new VictorOps action as described in Create Actions.

  3. Fill in the VictorOps action parameters as required (see table below). Pay special attention when pasting the Service Endpoint API URL from VictorOps into the Service Endpoint API field.

Your VictorOps action is now fully configured and ready to use. Incidentally, you can create multiple VictorOps actions if you have multiple alerting channels.

Parameter Description
Name The name provided for the action.
Behavior of the alert For example, critical.
Service Endpoint API Where to paste the Service API Endpoint URL from VictorOps