topic Re: Can custom alert scripts be added to Splunk Light Cloud? in Alerting

Can custom alert scripts be added to Splunk Light Cloud?

ebjurstrom — Wed, 16 Sep 2015 15:50:25 GMT

I am evaluating Splunk products with the intention of integrating with Datadog. One of the integration pieces is adding an alert script to Splunk that sends the alert to Datadog. I see the option in Splunk Light Cloud to configure the alert to use a script, but I cannot find any way to deploy / manage deployment of custom scripts.

Thank you,

Re: Can custom alert scripts be added to Splunk Light Cloud?

jterry — Wed, 01 Jun 2016 20:48:12 GMT

Not sure about being able to deploy a script via REST to a cloud instance but the webhook alert action might work for you:

http://docs.splunk.com/Documentation/Splunk/latest/Alert/Webhooks

Re: Can custom alert scripts be added to Splunk Light Cloud?

itarribatec — Tue, 11 Oct 2016 12:31:27 GMT

the webhook does not seem to be flexible ?
Can it be adapted?
Certain apps are expecting a defined JSON (e.g. slack)
,Hi
the webhook on Splunk Light does not seem to be configurable?
If that is true it is not really useful since e.g. #slack expects a specific json

Re: Can custom alert scripts be added to Splunk Light Cloud?

yannK — Tue, 11 Oct 2016 20:45:04 GMT

Apps are not allowed on splunklight, so they are not allowed on splunkcloud light.
Check if the app is allowed on splunkcloud, then upgrade to splunkcloud if you need it.