Alerting

How to create tickets to an in-house ticketing system using alerts

IlyasPatel
New Member

I would like some guidance on creating a ticket in an in-house ticketing system when an alert is raised from Splunk.  

 

Are there any links to documentation that would help me towards this please?

Labels (1)
0 Karma

IlyasPatel
New Member

I have just come across an alert similar to the below which creates a ticket in an internal ticketing system but I am unsure if this is using a webhook - "raiseticket ticket_processname=Prod_Support"

 

index="indexName"
a=ServiceName
"Total Attempts Exceeded" | stats count | where count > 0 |
eval Operational_Guide="https://www.docs.com" |
table count,Operational_Guide |
raiseticket ticket_processname=Prod_Support urgency=1
ticket_title=Splunk_Alert:ServiceName_Total_Attempts_Exceeded
email_to="support@company.com" email_attachment_filename_prefix=Splunk_result

0 Karma

niall_munnelly
Path Finder

That's a lot to ask for, and you'd do better to narrow it down. Splunk supports outbound webhooks; a webhook-based ticketing system is probably the best start. Good luck.

0 Karma
Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...