How to Get Notified by Splunk On-Call

What is Splunk On-Call Notification?

Splunk On-Call (formerly VictorOps) is a hub for centralizing the flow of information throughout the incident lifecycle. It connects monitoring alerts to on-call teams, providing a timeline view of incidents and enabling efficient team coordination.

Why Use Splunk On-Call Notifications?

• Timeline view — See the full incident lifecycle in one place
• Team coordination — Built-in chat and collaboration during incidents
• Smart routing — Route alerts based on policies and schedules
• Post-incident reports — Automated reporting for retrospectives

How to Configure Splunk On-Call Notifications

Step 1: Get Your Splunk On-Call API Key

1. Log in to your Splunk On-Call account
2. Go to Settings → Integrations
3. Find or create a REST Generic integration
4. Copy the API Key and Routing Key

Step 2: Create a Notification Role in Xitoring

1. Log in to your Xitoring Dashboard
2. Go to Settings → Notification Roles
3. Click Create New Role
4. Name it (e.g., "Splunk On-Call")

Step 3: Add Splunk On-Call Channel

1. Click Add Contact in the notification role
2. Select Splunk On-Call as the channel
3. Enter the API Key and Routing Key
4. Save

Step 4: Verify

1. Click Send Test and check the incident in Splunk On-Call

Best Practices

• Define clear routing keys for different infrastructure components
• Use escalation policies to ensure no alert goes unnoticed
• Leverage the timeline for post-incident analysis
• Combine with Slack for real-time team communication during incidents

Learn More

Explore all available Notification Channels to complement your incident management setup.