Splunk and MS Teams

[jesusreyes]

I am looking for documentation on how to use Splunk with MS Teams. I want to forward alerts to groups in MS teams.

[jaxjohnny2000]

splunkbase.splunk.com/app/3375/  has been archived.

This one will do what you need. It's easy to setup 

https://splunkbase.splunk.com/app/4787  - It creates O365 Cards. You can set different Icons and colors for different alerts.  

Provides an alert action to easily send Office 365 Cards to a Microsoft Teams channel using the Incoming Webhook Connector in Teams. Easily send beautiful alerts with customizable text or search data included with the Card. (copied from splunkbase)

https://www.groundsecurity.com/splunk-app-microsoft-teams-alert-cards/ 

So far, works everytime.  

I have not figured out how to create the "alert" notification where the little channel lights up, but the cards do show up in the teams channel. 

[ajzodak]

This Add on is only supported for Splunk Enterprise and not for Cloud. can you pls let me know if there is any add on for Splunk cloud support ?

[amitm05]

I think this is the one shall suit your purpose -
https://splunkbase.splunk.com/app/3375/

This is a webhook based, so your Teams channel URL should go to the Webhook of the Real time alert