GitHub#

Integration Details

Ingester

• HTTP - HEC
• Simple Relay

Kit

GitHub Kit

GitHub Configuration#

[Option 1] Streaming Github Logs#

Follow the instructions for setting up streaming to Splunk. For the configuration page point to your Gravwell HTTP ingester.

[Option 2] Using WebHooks to export Logs#

Github provides webhooks for exporting logs depending on what you want to export for example for monitoring single repository, app, enterprise, global, etc.. You can follow the instructions posted point the Payload URL to a Gravwell Simple Relay Ingester and change Content Type to application/json.

Gravwell Configuration#

Gravwell Storage Well Configuration#

Setup the well configuration in your Gravwell indexers.

Sample well config:
Create or edit: /opt/gravwell/etc/gravwell.conf.d/github-well.conf

[Storage-Well "github"]
    Location=/opt/gravwell/storage/github
    Tags=github*

Gravwell HTTP HEC Ingester Configuration#

Setup the HTTP HEC configuration file.

Sample GitHub config:
Create or edit: /opt/gravwell/etc/gravwell_http_ingester.conf.d/github.conf

[HEC-Compatible-Listener "github"]
    URL="/services/collector"
    TokenValue="thisisyourtoken"
    Tag-Match=github:github
    Tag-Match=github-audit:github_audit