<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}img.fr-dib.fr-fir { margin-right: 0; text-align: right;}img.fr-dib.fr-fil { margin-left: 0; text-align: left;}img.fr-dib { margin: 5px auto; display: block; float: none;}img.fr-bordered { box-sizing: content-box; border: solid 5px #CCC;}img.fr-shadow { box-shadow: 10px 10px 5px 0px #cccccc;}img.fr-rounded { border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;}</style><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" data-pasted="true"><strong style="box-sizing: inherit; font-weight: bolder;">In this guide we will cover:</strong></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><strong style="box-sizing: inherit; font-weight: bolder;">- What is the Splunk On Call Integration?</strong></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;" data-pasted="true"><strong style="box-sizing: inherit; font-weight: bolder;">- Connecting to Splunk On Call </strong></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><strong style="box-sizing: inherit; font-weight: bolder;">- Configuring and Integrating Splunk On Call</strong></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><strong style="box-sizing: inherit; font-weight: bolder;">- Creating Splunk On Call Webhooks</strong></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><br></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: Poppins, sans-serif, Roboto; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><br style="box-sizing: inherit;"></p><p><strong><span style="font-size: 14pt;">What is the Splunk On Call Integration?</span></strong></p><p>Splunk on Call is an incident management platform designed to help teams respond quickly to problems and incidents. The platform is designed to help Agents prioritise issues, and meet their SLAs. </p><p><br></p><p data-pasted="true"><strong><span style="font-size: 14pt;">Connecting to Splunk On Call</span></strong></p><p data-pasted="true">After logging into your Halo account as an administrator, go to Configuration > Integrations > Incident Management, where you will find the Splunk On Call module. Hover over this and click the plus "+" icon to enable the module.</p><p><br style="box-sizing: inherit;"></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjNjMTY4MDZlLWRkZWEtNGYyYS04MWQyLWMyNmU2N2EzZjNiOSJ9.MJJ7WrankXxnSeqvHAwGkX-v2ZsKE7TOVgr-LwQL3UY" class="fr-fic fr-fil fr-dib" width="112" height="127"></p><p><strong><span style="font-size: 10pt;">Fig 1. Enabling the module</span></strong></p><p> </p><p><br></p><p>Within Splunk on Call head to Integrations > API and click "Activate API".</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImZkNTM2MWEyLWI4ZDQtNGM0NS04ZWVhLWE5YzQ4ZDZhYTVhMiJ9.Fom9FA9cwGUmpsSb3IhrET_8ibU_FrpHofLcWDrR4y0" class="fr-fic fr-fil fr-dib" width="786" style="width: 788px; height: 216.263px;" height="216"></p><p><span style="font-size: 10pt;"><strong>Fig 2. Activating your API in Splunk On Call</strong></span></p><p><br></p><p>Once activated, you can create an API key using the "New Key button".</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjE1NmU1MjkwLTFhYjctNDQxZi04MjdlLTBmOTE0ZjRjNjViZiJ9.NxApeSyB6KRFO_fs2qFyHZ5kHHU-KvRXJUAh5r7WerU" class="fr-fic fr-fil fr-dib" width="778" style="width: 780px; height: 296.016px;" height="296"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 3. API ID & Key</strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><br style="box-sizing: inherit; color: rgb(0, 0, 0); font-family: sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"></p><p>Copy this new key and your API ID to your clipboard. Now head back to Halo and open the Splunk On Call module. Paste the ID and key respectively. Once set, validate the API Key using the button in <strong>Fig 4</strong>. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjE2YTZiNGY3LWY3MjMtNDk2NS1hOGI2LTZmMmVlYWZjNjU1NSJ9.X5Cvod13vlnHgVC58sBW40tXgB68WsdGUAoDQUzuj70" class="fr-fic fr-fil fr-dib" width="1176" style="width: 1178px; height: 254.02px;" height="254"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 4. Filling in your API details</strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><br></p><p data-pasted="true"><strong><span style="font-size: 14pt;">Configuring and Integrating Splunk On Call</span></strong></p><p>To make sure Splunk On Call recognises the Agent in Halo, you will need to set the corresponding Splunk On Call Username in Configuration > Teams & Agents > Agents > Select Agent > Integrations tab.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjNkMjIyMDljLTBkZmMtNDFjMy1iNGNlLTJmOWM4ZTczZjY5MSJ9.B5J_pWjJGmZt67dVgw74wkff5Um9BeanhCqEKYb7vfo" class="fr-fic fr-fil fr-dib" width="784" style="width: 786px; height: 200.977px;" height="201"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 5. Setting your Splunk On Call Username</strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><br style="box-sizing: inherit; color: rgb(0, 0, 0); font-family: sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"></p><p>To find this head to the Users tab in Splunk On Call and check the username column. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjNkNTYxMzRhLTY1YWQtNDUwZi1hMmJhLTE4NzRkNjRhNTc1ZSJ9.DxNPdW6ehXGeL-DAOOy9evVM6nYB0UPsBbXUsIc6nLA" class="fr-fic fr-fil fr-dib" width="786" style="width: 788px; height: 178.329px;" height="178"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 6. Finding your Splunk On Call Username</strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><br style="box-sizing: inherit; color: rgb(0, 0, 0); font-family: sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"></p><p>Next you will need to add the "Send to Splunk On Call" and "Splunk On Call Target" Fields to your Ticket Type.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImFjMzQxN2Y3LWJiYTYtNGQwZS05ZWMyLTgxN2I3OWI0NjFjNSJ9.S3cn-WLbdmXKSNCylPV8t-KHOn4-ncRTbj1KIBgEl4E" class="fr-fic fr-fil fr-dib" width="787" style="width: 789px; height: 406.923px;" height="407"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 7. Adding the Splunk On Call Fields to a Ticket </strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><br style="box-sizing: inherit; color: rgb(0, 0, 0); font-family: sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"></p><p>Now when you create a ticket you will see the option to send the ticket to Splunk On Call. When checked the Splunk On Call target, and Team/Escalation Policy will become visible. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImZiNzliOTZlLWMyOTYtNDdkNS1hMDZlLTIyMWNjNTg3ZjAwNiJ9.yXEcQL1Xgw5xxYeTWxLvv49qXTkPoKt1a6d-enOMAro" class="fr-fic fr-fil fr-dib" width="783" style="width: 785px; height: 591.153px;" height="591"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 8. Sending to Splunk On Call </strong></span></p><p><br></p><p>To add notes to the Ticket in Splunk On Call you can add the "Send to Splunk On Call" field to an Action.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjhjMTQ3YTBhLTBjM2UtNDZkNi1iMjAyLTljNjg2ZTljMWU0MyJ9.SqHpepzuIVyWHq5oudunLvQGTebIqSezaXb78PvJvTw" class="fr-fic fr-fil fr-dib" width="792" style="width: 794px; height: 278.352px;" height="278"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 9. Adding the Splunk On Call Fields to an Action </strong></span></p><p><br></p><p>Now when the Action is used you will see the "Send to Splunk On Call" checkbox. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjRhZjg5NmNlLTIwODUtNDNkMi04Y2Y0LTM4NmE2ZTk1MzE4YiJ9._q4c_LUgfdzo7Qbg2TyEsb5pyz2HjyNDxw0uiAuu_1w" class="fr-fic fr-fil fr-dib" width="780" style="width: 782px; height: 296.291px;" height="296"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 10. Sending to Splunk On Call form an Action </strong></span></p><p><br></p><p>At the bottom of the Splunk On Call module you will find the option to "Show a message for each successful sync to Splunk On Call". This will display a pop-up whenever a sync has successfully occurred.</p><p><br></p><p data-pasted="true"><span style="font-size: 14pt;"><strong>Creating Splunk On Call Webhooks</strong></span></p><p><br></p><p>To create and update tickets in Halo from Splunk On Call you will need to create outgoing Webhooks. </p><p><br></p><p>Within the Splunk On Call module in Halo you will find the details required for your Webhooks. In the box under "Authentication" set a password. Keep note of this, as this will be used later to authorise the Webhook. Now you can set the Ticket type, and User for tickets that are created from Splunk On Call.</p><p><br></p><p>Now click into the button labelled with the event you would like to trigger the creation or update of a ticket. These events can be:</p><p><br></p><ul><li>Incident-Triggered</li><li>Incident-Acknowledged</li><li>Incident-Resolved</li><li>Incident-Chats</li></ul><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjNhYzc5ZTFiLTQ2ODEtNDQxMy05MTY4LTNkNzMzOTQyZTY4MSJ9.dd4jBo0B31eRu8762N3vLTtjKcMr0-V4ioKaPU0WOUU" class="fr-fic fr-fil fr-dib" width="1182" style="width: 1184px; height: 336.188px;" height="336"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 11. Receiving from Splunk On Call</strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><br></p><p>This will show a pop-up with the details you need to add to the Webhook.</p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjU1NjUwNTBmLWY3ZGQtNDY3NC05Y2Y5LTcyMTg4ZmNjNDI4NyJ9.6puadgQIijUr40bUAp_3r2RilN0vrVt1-QJAn7Er47s" class="fr-fic fr-fil fr-dib" width="455" style="width: 457px; height: 403.156px;" height="403"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 12. Webhook details </strong></span></p><p><br></p><p data-pasted="true">Now within Splunk On Call head to Integrations > Outgoing Webhooks, and add a Webhook.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImIxYWZhMTY1LWZmMTgtNDg1MS05MmVmLWFmYzQ2MzM0MWQ3NCJ9.KEeqEa_aEtRAnvKc4Ap8zda3kYD6c9zIT02eBkhRibA" width="1054" style="width: 1056px; height: 202.013px;" height="202" class="fr-fic fr-dii"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 13. Creating outgoing Webhooks in Splunk On Call</strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><br></p><p>Fill in the details as in <strong>Fig 12</strong> . For the "To" field follow the format "https://YOURHALO.COM/api/notify/SplunkOnCall". The Payload can be copied across from Halo, and inserted into the "Payload" field. Once you have filled in the Webhook information, select the "Add Custom Header" button.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImE1MGY2MTA1LThkNmItNGQ5Mi04OTRlLTNjMjMzY2YwOGM4ZSJ9.QrW_MVABFrMJjPCPgcb3hAyZH20Y9Z9rD3JmmS2Pzz8" class="fr-fic fr-fil fr-dib" width="837" style="width: 839px; height: 525.444px;" height="525"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 14. Adding a Custom Header</strong></span></p><p><br></p><p>Here set the "Key" to "Authorization", and set the "Value" to your chosen password set in <strong>Fig 11</strong>.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImYzZTk2NGY5LTA5ZmYtNDA5Yi04MDExLWVjNTQ2YzRmYTc4MyJ9.17z7qXWjQuQzKVBPcNQfZ70OtJ0CAxPtMRUfbx3k3B8" class="fr-fic fr-fil fr-dib" width="836" style="width: 838px; height: 511.336px;" height="511"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 15. Authorising your Webhook </strong></span></p><p><br></p><p>You can create custom Webhooks to add a note to your Incident in Splunk On Call from Ticket events in Halo. For example, this can be used to add a note on the Splunk On Call Incident when a User has updated the ticket. To do this, head to the "Splunk On Call Webhooks" section of the Module in Halo, and select "Create Webhook". </p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImQ1Mjg2NDkxLTk3YjgtNDFkOC1hNDEzLTQ4OTI2ODY5NWUyYSJ9.iW42xtbXtpjnliEZE3MNVvbHnYbWQBjkDm2WSv1Qu0A" class="fr-fic fr-fil fr-dib" width="1125" style="width: 1127px; height: 193.069px;" height="193"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 16. Creating a Webhook in Halo</strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;"> </strong></span></p><p>Here set the name, ensure the Webhook Type is set to "Splunk On Call", and set the Events which will trigger the Webhook. Once completed ensure the "enabled" checkbox is selected. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImU1ZWI3YmI2LTA0YTItNDQ4Yi1iMjIzLWFkYjQ2YTQxNTM0NiJ9.DRBIz-LsTXxqHelEf48sYbDZPOe4HfC4YU5uvAuKnLA" class="fr-fic fr-fil fr-dib" width="1130" style="width: 1132px; height: 592.586px;" height="593"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 17. Configuring your Webhook </strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><br></p><p>To view or edit this Webhook at a later stage you can click the "View Webhooks" button in <strong>Fig 16</strong>. </p><p><br></p><p>You can also customise the note that shows in Splunk On Call by editing the Notification Template. To do this select the "Notification Templates" button and choose the relevant template.</p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjAwODJiNTAxLWFkNGQtNDI3NC05MzlkLWZlNDA4MTgwNzZkYiJ9.rO7ua9HAub04s87IO3c6qoh2Qq_j6ktOhTe72-3dbEY" class="fr-fic fr-fil fr-dib" width="1117" style="width: 1119px; height: 200.614px;" height="201"></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;" data-pasted="true"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 18. Notification Templates </strong></span></p><p style="box-sizing: inherit; margin: 0px; line-height: 1.4285em;"><br></p><p>You can edit this template as needed.</p><p><br></p><p><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;"><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6Ijk4ZjcyOGY3LTBiN2QtNDk5OC1hYzdjLWU1Yjc5NzdkY2QxZiJ9.s_PZJMsMp54yp9hX4hKBxB4q28rvWyIz9gdPshhNSYs" class="fr-fic fr-fil fr-dib" width="683" style="width: 685px; height: 430.68px;" height="431"></strong></span></p><p data-pasted="true" style="box-sizing: inherit; margin: 0px; line-height: 1.4285em; color: rgb(0, 0, 0); font-family: sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"><span style="box-sizing: inherit; font-size: 10pt;"><strong style="box-sizing: inherit; font-weight: 700;">Fig 19. Editing Notification Templates </strong></span></p>
