Alerting

Splunk Cloud Scripted Alerts - What can and cannot be done?

Deexeh
Engager

Hello and Good day Splunkers.

I have a bit of a vague question. Does anyone have any information or knowledge to share on Scripted Alerts in Splunk Cloud? Trying to go through the documentation to find out what alert actions are possible and I'm having difficulty making sense of it.

The reason I'm asking is another team has approached us to build a scripted alert for them. So when an alert is triggered it's not just sending an email but splunk also runs a script to download some files through a provided .sh script which appears to be a thread dump web service.

The reason I'm asking so vaguely is to try and gauge what Alert Actions are possible and not possible in Splunk cloud.

Any idea's are appreciated.

Thank you for reading!

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...