topic Re: Issue in integrating Splunk alert with Slack in Alerting

Issue in integrating Splunk alert with Slack

juhisaxena28 — Tue, 18 Jun 2019 14:12:12 GMT

We are trying to send data from Splunk to Slack via Trigger actions-- Add Actions method. Further we are entering the slack channel name and message. But we are not getting the alerts via slack. Please advise.

Re: Issue in integrating Splunk alert with Slack

Vijeta — Tue, 18 Jun 2019 14:23:02 GMT

@juhisaxena28 are you using Slack Webhook Alert TA? Have you configured the Account with Webhook name and URL?

Re: Issue in integrating Splunk alert with Slack

juhisaxena28 — Tue, 18 Jun 2019 15:18:30 GMT

We are using Trigger actions option and selecting Slack dropdown as an option while editing the saved search.

Re: Issue in integrating Splunk alert with Slack

Vijeta — Tue, 18 Jun 2019 18:53:20 GMT

You might want to use Slack Webhook Alert add-on, once its configured correctly, you can select Slack webhook from Trigger actions dropdown in your saved search.

Re: Issue in integrating Splunk alert with Slack

DavidHourani — Tue, 18 Jun 2019 19:01:40 GMT

Hi @juhisaxena28,

There are a lot of apps that allow you to send notifications and alerts to Slack. Personally I prefer this one :
https://splunkbase.splunk.com/app/2878/

Some description on how to use it can be found here:
https://answers.splunk.com/answers/351316/slack-notification-alert-how-can-i-get-the-message-1.html

you could also use this if you prefer, either works :
https://splunkbase.splunk.com/app/3525/

Cheers,
David