Alerting

How to show alerts as a pop up or toast?

pedram
Engager

We have a small dashboard and we would like to have a script alert action or a custom alert action.

What we would like to do is to send a toast or a pop up notification to the system so when the alert is triggered, if the operator is not looking at the dashboard, they will be able to see the pop up or toast in the bottom right corner of screen. Just like an alert you get from MS Outlook for a new email. 

Is this possible? Any help would be appreciated. 

Labels (1)
0 Karma
1 Solution

jacobpevans
Motivator

Greetings @pedram ,

See here: https://community.splunk.com/t5/Splunk-Search/How-to-display-a-popup-when-i-open-the-dashboard/m-p/5...

Long story short. Yes, it's possible. No, Splunk can not do it natively. If you want it, you have to build it.

However, for your use case, Splunk can natively publish custom messages to the Messages drop-down at the top-right of every screen. Here's the REST endpoint to manipulate it: https://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTsystem#messages. It is accessible via GUI as Settings > User Interface > Bulletin Messages.

Cheers,
Jacob

If you feel this response answered your question, please do not forget to mark it as such. If it did not, but you do have the answer, feel free to answer your own post and accept that as the answer.

View solution in original post

0 Karma

jacobpevans
Motivator

Greetings @pedram ,

See here: https://community.splunk.com/t5/Splunk-Search/How-to-display-a-popup-when-i-open-the-dashboard/m-p/5...

Long story short. Yes, it's possible. No, Splunk can not do it natively. If you want it, you have to build it.

However, for your use case, Splunk can natively publish custom messages to the Messages drop-down at the top-right of every screen. Here's the REST endpoint to manipulate it: https://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTsystem#messages. It is accessible via GUI as Settings > User Interface > Bulletin Messages.

Cheers,
Jacob

If you feel this response answered your question, please do not forget to mark it as such. If it did not, but you do have the answer, feel free to answer your own post and accept that as the answer.
0 Karma
Get Updates on the Splunk Community!

Platform Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestIntroducing Splunk Edge Processor, simplified data ...

Enterprise Security Content Updates (ESCU) - New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 3 releases of new content via the Enterprise ...

Thought Leaders are Validating Your Hard Work and Training Rigor

As a Splunk enthusiast and member of the Splunk Community, you are one of thousands who recognize the value of ...