Humio supports sending events to Tines through webhooks. To receive events from Humio in Tines, you will need to set up a webhook agent in Tines.
In Humio,
Wait for the alert to trigger. Then, back in Tines,
{
"webhook_agent": {
"repository": "Testing",
"timestamp": "2020-02-18T20:53:20.546Z",
"alert": {
"name": "Tines Alert",
"description": "",
"query": {
"queryString": "* ",
"end": "now",
"start": "1m"
},
"notifierID": "N9DAw1Q6bPaxgRoexv94Qfc3HmaTPzbg",
"id": "cx7xIdcYMNqZduOcDryndfphKSayyBgm"
},
"warnings": "",
"events": [
{
"@timestamp": 1582059199976,
"#type": "kv",
"#repo": "Testing",
"@timezone": "Z",
"hello": "tines",
"@rawstring": "hello=tines",
"@id": "zZvht1UVROc92nnXtQDDBshD_0_1_1582059199"
}
],
"numberOfEvents": 1
}
}
To create a notification
Move an Event Transformation Agent into your main window.
Connect the Webhook Agent to the Event Transformation Agent.
In the Event Transformation box, type
{ “mode”: “explode”, “path”: “{{.webhook_agent.events}}", “to”: “event” }
Now you can connect your event transformation agent to any of your other workflows in Tines.
<div class="figure-box go-left">
<figure>
<img src="/images/pages/integrations/tines/tinesio.png" />
<figcaption></figcaption>
</figure>
</div>