Alerting

How to create tickets to an in-house ticketing system using alerts

IlyasPatel
New Member

I would like some guidance on creating a ticket in an in-house ticketing system when an alert is raised from Splunk.  

 

Are there any links to documentation that would help me towards this please?

Labels (1)
0 Karma

IlyasPatel
New Member

I have just come across an alert similar to the below which creates a ticket in an internal ticketing system but I am unsure if this is using a webhook - "raiseticket ticket_processname=Prod_Support"

 

index="indexName"
a=ServiceName
"Total Attempts Exceeded" | stats count | where count > 0 |
eval Operational_Guide="https://www.docs.com" |
table count,Operational_Guide |
raiseticket ticket_processname=Prod_Support urgency=1
ticket_title=Splunk_Alert:ServiceName_Total_Attempts_Exceeded
email_to="support@company.com" email_attachment_filename_prefix=Splunk_result

0 Karma

niall_munnelly
Path Finder

That's a lot to ask for, and you'd do better to narrow it down. Splunk supports outbound webhooks; a webhook-based ticketing system is probably the best start. Good luck.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...