Alerting

How to get Teiggered actions details from alert_actions.conf inside default directory of custom alert action app?

avni26
Explorer

Hi Team,

I have created one custom alert action to get all triggered alert details. I am unable to get triggered actions.
How do I get the Triggered actions like email, slack, from parameter of my alert_actions.conf
I am trying to add a parameter $alert.action$ into my alert_actions.conf (param.action=$alert.action$) but that giving me blank ,after alert triggered.
The test alert has triggered actions of slack and email both.
I have tried like this also (param.action=$action$) or (param.action=$trigger_action$), but all not working.

Please help , any tips or hints appreciated.

Thanks,

Tags (1)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...