topic Re: How can I show/display alerts on the Messages tab as bulletin messages at the top of Splunk Web? in Alerting

How can I show/display alerts on the Messages tab as bulletin messages at the top of Splunk Web?

93591c — Tue, 20 Oct 2015 14:51:55 GMT

Hi,

I am trying to show/display the results of the Alerts created on the Messages tab. (Some kind of notification on the Messages tab of the UI)
I am a newbie to Splunk (using Splunk 6.2), hence requesting for the solution.

Re: How can I show/display alerts on the Messages tab as bulletin messages at the top of Splunk Web?

somesoni2 — Tue, 20 Oct 2015 18:45:56 GMT

Are you looking for Bulletin messages? See these

https://answers.splunk.com/answers/123392/how-to-inform-the-splunk-users-of-a-maintenance-in-splunk.html
http://docs.splunk.com/Documentation/Splunk/6.0.5/Admin/Customizeuserexperience

Re: How can I show/display alerts on the Messages tab as bulletin messages at the top of Splunk Web?

93591c — Wed, 21 Oct 2015 02:51:53 GMT

Hi,
Thanks so much for solutions, however I have already tried those solution but it didn't helped me. I am trying to do similar thing with alerts. The result of the alert should be shown as pop up on the message bar(bulletin message).

Re: How can I show/display alerts on the Messages tab as bulletin messages at the top of Splunk Web?

93591c — Mon, 30 Nov 2015 01:41:34 GMT

Hi ,
The given links doesn't solve the purpose.Any new suggestions please..

Re: How can I show/display alerts on the Messages tab as bulletin messages at the top of Splunk Web?

MuS — Mon, 30 Nov 2015 02:02:47 GMT

Hi 93591c,

if you follow @somesoni2 's first link you will find this command:

curl -k -u admin:changeme https://127.0.0.1:8089/services/messages -d severity="warn" -d name=message -d value="This is your Splunk Admin, there will be a maintenance of this instance in 10 minutes -> 15:00 , ETA of 30 minutes -> 15:30, for updates contact me at YourFriendlyNeighborhoodAdmin@mydomain.com"

Learn about custom alert scripts here http://docs.splunk.com/Documentation/Splunk/6.3.1511/AdvancedDev/ModAlertsIntro and here http://docs.splunk.com/Documentation/Splunk/6.3.1/Alert/Configuringscriptedalerts . Add your custom script in $SPLUNK_HOME/etc/apps/YourAppName/bin and assign it to the alert. Test your script so it will take the correct SPLUNK_ARG_* from the alert and shows as message in the UI.

Here is the command used:

curl -k -u admin:admin123 https://127.0.0.1:8089/services/messages -d severity="info" -d name=message -d value="This is your Splunk Admin, there will be a maintenance of this instance in 10 minutes -> 15:00 , ETA of 30 minutes -> 15:30, for updates contact me at YourFriendlyNeighborhoodAdmin@mydomain.com"

and the result in Splunk:

Hope this helps ...

cheers, MuS

Re: How can I show/display alerts on the Messages tab as bulletin messages at the top of Splunk Web?

klsio — Mon, 07 Mar 2016 01:16:02 GMT

I wanna add LINK in messages. How can i do this?

Re: How can I show/display alerts on the Messages tab as bulletin messages at the top of Splunk Web?

MuS — Mon, 07 Mar 2016 01:23:35 GMT

So far you could only add text into the message, but just test it and see what happens:

curl -k -u admin:admin123 https://127.0.0.1:8089/services/messages -d severity="info" -d name=message -d value="click this link https://www.google.com";