Red Hat Insights is a managed service that continuously gathers and analyzes platform and application data to predict risk, recommend actions, and track costs. Insights alerts administrators with timely warnings and/or suggested optimizations for the systems in your implementation, for example:

    Operations - an outage is about to occur
    Security - a new CVE is affecting your systems
    Business - overspending on resources is taking place

The application integration with Splunk either uses Insights APIs to collect data and perform tasks in a similar way to a client that you would create yourself, or subscribes to streams of Insights events. The method you use depends on your targeted use case.

Red Hat Insights application for Splunk forwards selected Insights events to Splunk. The application seamlessly integrates with Red Hat Insights, so that you can focus on handling the data on the Splunk application side, in the same way you manage other sources of data.

Insights is included as part of your Red Hat subscription, and is accessible through Red Hat Hybrid Cloud Console.

Installation and initial configuration are automated, so setting up the integration is quick and simple. The project is open source, and we welcome contributions or feedback on its repository: https://github.com/RedHatInsights/eventing-splunk-app