Tracelight events into your Splunk HEC.

What's in this integration

• Generic webhook → Splunk HEC URL with the HEC token in the Authorization header
• Each Tracelight event becomes one Splunk event with full structured payload
• Index by event type (sourcetype = tracelight:alert, tracelight:case, etc.)
• HMAC signature included as a Splunk indexed field for downstream verification

Setup

1. 1
   Splunk → Settings → Data Inputs → HTTP Event Collector → New Token
2. 2
   Note the HEC URL (typically https://your-splunk:8088/services/collector) + token
3. 3
   Tracelight → Dashboard → Integrations → New webhook → Kind: generic_json → URL = HEC endpoint
4. 4
   (Custom HEC integration may require an intermediary route to format payload + add Splunk-specific headers — see docs)
5. 5
   Test from Tracelight + verify events arrive at the HEC index

Events you can subscribe to

See the full event payload schemas at /zapier + /docs.