How to show alerts as a pop up or toast?

[pedram]

We have a small dashboard and we would like to have a script alert action or a custom alert action.

What we would like to do is to send a toast or a pop up notification to the system so when the alert is triggered, if the operator is not looking at the dashboard, they will be able to see the pop up or toast in the bottom right corner of screen. Just like an alert you get from MS Outlook for a new email. 

Is this possible? Any help would be appreciated. 

[jacobpevans · Accepted solution]

Greetings @pedram ,

See here: https://community.splunk.com/t5/Splunk-Search/How-to-display-a-popup-when-i-open-the-dashboard/m-p/5...

Long story short. Yes, it's possible. No, Splunk can not do it natively. If you want it, you have to build it.

However, for your use case, Splunk can natively publish custom messages to the Messages drop-down at the top-right of every screen. Here's the REST endpoint to manipulate it: https://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTsystem#messages. It is accessible via GUI as Settings > User Interface > Bulletin Messages.