Linode Add-on for Splunk

The Linode Add-on for Splunk includes inputs for analyzing various Linode account events.

The following events can be collected by this Add-on:
- Linode Events
- Account Invoices
- Account Logins
- Account Notifications
- Account Payments
- Account Service Transfers

Prerequisites

An active Linode Account
A read-only Linode Personal Access Token
See the official Linode API Documentation for more details

Installation

This Add-on can be installed onto a Splunk Cloud or Enterprise instance through the provided .tar.gz package or through the Browse More Apps section of Splunkbase.

Usage

Inputs can be manually created and configured in the “inputs” sections of the Add-on. When creating an input, the following fields must be specified:

Flag	Description
Interval	Determines how frequently the input should poll for event updates. (minimum 180s)
Index	The Splunk index to store new events in.
Linode API Token	The read-only Linode API Token is created on the account to collect events from. See the official Linode API Documentation for more details.
Start date (optional)	The start date of events to be collected. This can be used to retroactively import events that occurred prior to input creation.

Source code

https://github.com/linode/splunk-addon-linode