alerts via health.conf

[danman71]

Hey All, 

I have some questions about health.conf and web hooks. Recently I've been toying around with health.conf and testing some alerting. I noticed in my conf file I have alert_action.webhook. But I can't find anything in the documentation about it? What I would like to do is configure this to send an alert to a teams channel. Anyhow, if anyone has any information or done something similar, I'd like to hear about it. 

[danman71]

I have this app, and it works great when creating custom alerts. But I'm talking within the health.conf there is a webhooks stanza. I'm curious about that. Is a new feature, etc?

[jodonald]

There is an app in Splunkbase which may help.  I would recommend starting there.

Hope that helps.