Alerting

Custom alert action is not working as expected.

Path Finder

Hello,

I'm trying to create to custom alert action from alert manager app to automate emails with invoking action. I add this on alert_action.conf. Its not working as expected. Any suggestions?

[snow_email]
is_custom = 1
label = SNOW action
disabled = 0
command = |sendalert sendemail "to=test@service.now.com" "server=relay.test.com" "from=splunk@test.com" "subject=test22"

0 Karma

Splunk Employee
Splunk Employee

I dont think you need the |sendalert at the start of the command, the sendemail should be sufficient

0 Karma

Path Finder

I tried, its working with regular alerts, but not from the app actions.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!