Use Case

Learn more about the use case.

  • Receive alerts from Splunk to create events in OBM.


Learn more about the integration and network requirements.

Integration Requirements


Operations Agent


  • Username and Password

  • API Token

  • N/A


  • Admin Role

  • N/A


Network Requirements

Direction (Port)


  • Splunk → ZigiOps (9091)

  • ZigiOps → Splunk (8089)

  • ZigiOps → Operations Connector (30005)


Learn more about how to set up and enable the integration template.

  1. Select the Integrated Systems and click the Save button to continue.

  2. Enable the integration from the slider button located in the middle section of the screen.

Action Details

Learn more about the actions available in this integration template.

Each operation consists of 2 tabs - Source and Field Map. The Source tab contains the trigger, the trigger conditions, and the expressions configuration and the Field Map tab contains the mapping configuration.

Create Event

This action opens a web service listener to receive alerts from Splunk and to create events in OBM.


You could customize the listener protocol, port, path, and expressions from this tab or use the defaults.

Field Map

You could customize the field, value, and conditional mappings that suit your requirements from this tab or use the defaults.


This section provides information about the recommended considerations, which you should consider before starting the integration.


It is recommended to keep the default correlation configuration unless you're familiar with the integration and the specifics of the integrated systems. You could contact our support team for assistance before further changes to the correlation configuration.


The predefined templates comply with the specifics of the integrated systems. It is recommended to confirm if your integrated systems have any required fields, which must be reported so that you can map them accordingly. Please note that if a required field is not mapped, the operation might fail. In this case, you could review the troubleshooting page for more information about the operation's execution history.