Alerting

custom alert action parameters not from savedsearches.conf

schose
Builder

Hi all,

I'd like to create a custom alert action, which doesn't get it's custom parameters from savedsearches.conf, but from another (custom) configuration file.

I guess from the alert action (python) script it should be no issue to read and parse another configfile instead of using the json which is coming from stdin.

so far I have no idea how to display the values for the parameters in the webgui of the alert from another source than savedsearches.conf.

Did anyone may fall over a custom alert action not using the default way to save and display parameters?

Thanks for you help in advance,

Andreas

0 Karma
Get Updates on the Splunk Community!

Splunk Smartness with Brandon Sternfield | Episode 3

Hello and welcome to another episode of "Splunk Smartness," the interview series where we explore the power of ...

Monitoring Postgres with OpenTelemetry

Behind every business-critical application, you’ll find databases. These behind-the-scenes stores power ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...