topic Splunk and MS Teams in Alerting

Splunk and MS Teams

jesusreyes — Thu, 08 Nov 2018 17:02:42 GMT

I am looking for documentation on how to use Splunk with MS Teams. I want to forward alerts to groups in MS teams.

Re: Splunk and MS Teams

amitm05 — Tue, 11 Jun 2019 11:06:53 GMT

I think this is the one shall suit your purpose -
https://splunkbase.splunk.com/app/3375/

This is a webhook based, so your Teams channel URL should go to the Webhook of the Real time alert

Re: Splunk and MS Teams

ajzodak — Wed, 15 Jan 2020 04:51:47 GMT

This Add on is only supported for Splunk Enterprise and not for Cloud. can you pls let me know if there is any add on for Splunk cloud support ?

Re: Splunk and MS Teams

jaxjohnny2000 — Fri, 07 Aug 2020 11:39:19 GMT

splunkbase.splunk.com/app/3375/ has been archived.

This one will do what you need. It's easy to setup

https://splunkbase.splunk.com/app/4787 - It creates O365 Cards. You can set different Icons and colors for different alerts.

Provides an alert action to easily send Office 365 Cards to a Microsoft Teams channel using the Incoming Webhook Connector in Teams. Easily send beautiful alerts with customizable text or search data included with the Card. (copied from splunkbase)

https://www.groundsecurity.com/splunk-app-microsoft-teams-alert-cards/

So far, works everytime.

I have not figured out how to create the "alert" notification where the little channel lights up, but the cards do show up in the teams channel.