This module allows you to take logs from PagerDuty and push them into Splunk for analysis. https://github.com/Sam-Martin/PagerDuty2Splunk
Provided you have Python installed, you can simply run:
pip install pagerduty2splunk
Relative: Push logs between yesterday and three days ago to Splunk:
pagerduty2splunk --log=INFO --start=1 --end=3 --splunk-token=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX --splunk-instance-id=prd-X-XXXXX --pagerduty-token=XXX-XXXXXXXXXXXXXXXX
Absolute: Push logs from 2016-01-01 to 2016-01-05 to Splunk:
pagerduty2splunk --log=INFO --start=2016-01-01 --end=2015-01-05 --splunk-token=XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX --splunk-instance-id=prd-X-XXXXX --pagerduty-token=XXX-XXXXXXXXXXXXXXXX
- splunk-instance-id is the subdomain of your Splunk instance in Splunk cloud
- splunk-token is the token of your HTTP Event Collector.
- pagerduty-token is your V2 API token (see Generating an API Key for more details).