Recieve pop up alert on remote machine

[j666gak]

Hello,

Is there a way of configuring so that when an alert occurs that a pop-up on a remote machine with a specified IP or IP range preferably by HTML or i guess NET SEND

The other nice to have would be if you have Enterprise Security Suite and configure in some way so that when an alert triggers it sets of an actual alarm bell or alarm light

[j666gak]

Thats great, thanks for the input, I shall try and see how I get on with a USB relay and a stroble light.

Thanks

[dwaddle · Accepted solution]

You can have an alert run a script when firing. That alert script can do anything you can imagine.

• A net send,
• use a VOIP bridge to call a phone ( A good spot to plug http://pagerduty.com )
• set off a (physical) alarm connected to a machine via some simple hardware (say a serial port's DTR)
• A scrolling message board

Because you're writing the code that does the interfacing with whatever, the only limit is what you're willing to write. Splunk will, on the occurrence of an alert, call your script to do its magick.