Alerting

How to create tickets to an in-house ticketing system using alerts

IlyasPatel
New Member

I would like some guidance on creating a ticket in an in-house ticketing system when an alert is raised from Splunk.  

 

Are there any links to documentation that would help me towards this please?

Labels (1)
0 Karma

IlyasPatel
New Member

I have just come across an alert similar to the below which creates a ticket in an internal ticketing system but I am unsure if this is using a webhook - "raiseticket ticket_processname=Prod_Support"

 

index="indexName"
a=ServiceName
"Total Attempts Exceeded" | stats count | where count > 0 |
eval Operational_Guide="https://www.docs.com" |
table count,Operational_Guide |
raiseticket ticket_processname=Prod_Support urgency=1
ticket_title=Splunk_Alert:ServiceName_Total_Attempts_Exceeded
email_to="support@company.com" email_attachment_filename_prefix=Splunk_result

0 Karma

niall_munnelly
Path Finder

That's a lot to ask for, and you'd do better to narrow it down. Splunk supports outbound webhooks; a webhook-based ticketing system is probably the best start. Good luck.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...