The Splunk integration is available now and is delivered in two parts -

A Splunk add-on GitHub or from Splunkbase. This enables users to poll GitHub audit log via API using a Splunk Heavy Forwarder. Support for Github Audit Log Monitoring Add-On for Splunk is run through Github Issues. Open a new issue for any support issues or for feature requests. You may also open a pull request if you’d like to contribute additional dashboards, eventtypes for webhooks, or enhancements.

https://splunkbase.splunk.com/app/5595/
https://github.com/splunk/github-audit-log-monitoring-add-on-for-splunk/issues
https://github.com/splunk/github_app_for_splunk

A companion Splunk Application with helpful out of the box dashboards is also available on GitHub or from Splunkbase. The GitHub App receives inputs from the GitHub Add-on and can collect GitHub Enterprise infrastructure metrics from Collectd, and events delivered via GitHub webhooks. Support for Github App for Splunk is run through Github Issues. Please open a new issue for any support issues or for feature requests. You may also open a Pull Request if you’d like to contribute additional dashboards, eventtypes for webhooks, or enhancements you may have.

#github

 

GitHub Audit Log Monitoring Add-On for Splunk
1 Likes11.35 GEEK