Can Splunk be integrated with Spectrum?

Products

• Spectrum
• Network Observability

Issue/Introduction

This article explains how Spectrum can be integrated with Splunk.

Environment

Release : 22.2.x, 23.2.x

Component : Spectrum Core / SpectroSERVER

Resolution

Yes, Splunk can be integrated with Spectrum. 

If you want to send your traps to Splunk and have Spectrum process them you would need to use the Southbound Gateway:

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/23-3/integrating/southbound-gateway-toolkit.html 

If you want to have Spectrum Alarms forwarded to Splunk you would need to customize the AlarmNotifier SetScript:

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/spectrum/23-3/managing-client-applications/alarmnotifier/customizing-alarmnotifier/sending-data-to-a-third-party-application.html