Integrating Splunk with
PageGate
Send Text and SMS Messages from Splunk
PageGate can be easily integrated with Splunk Lite, Splunk or Splunk Enterprise's alert notification system by using PageGate's GetASCII module to receive Command Line notifications from Splunk.
First, we'll need to configure PageGate's GetASCII module so it can provide the command line executable to Splunk.
1) In Windows on the PageGate Server, create a new directory for the integration. We recommend creating a sub-directory of your PageGateData directory called 'Splunk'. By default, c:\PageGateData\Splunk\
2) Open the PageGate Admin.
3) Go to Interfaces - GetAscii - Settings.
4) Set the Polling Directory to the directory you created in step 1. By default, c:\PageGateData\Splunk\
5) Check Enabled.
6) Click Apply.
6a) If prompted, you do want to enable this for all existing groups and recipients.
Now that we've made the executable available to Splunk, you'll need to use Splunk's 'Run a script' Trigger Action
For Splunk Lite: https://www.splunk.com/view/SP-CAAANZJ
For Splunk Enterprise: https://www.splunk.com/view/SP-CAAAGYG
You'll need to create a batch file (.bat) that Splunk can reference to execute a messaging command to PageGate. This batch file should be accessible to the Splunk server. You'll need to edit the batch file to say:
The command arguments need to be formatted as follows:
<GetASCII polling folder>\sendpage32.exe <recipient or group> <sender> <message>
For example, let's say you have the GetASCII polling directory set to c:\PageGateData\Splunk\, that you have a group in PageGate called 'itdept' and that you wanted the alert to come from the sender Splunk and the message should say 'This is a test', you would use the following command arguments:
c:\PageGateData\Splunk\sendpage32.exe itdept Splunk This is a test
|
