The view result in email alert doesn’t open because it redirects to splunk .xxxx.com:8000 . If I remove the 8000 then, it would work. How to change this so that it redirects to the proper host?
http://docs.splunk.com/Documentation/Splunk/6.3.2/Admin/Alertactionsconf
alert_actions.conf must be in the local
or default
directory of the application you are using when you run the report/search that generates the alert.
This should work because when http://
is specified it will take it literally...
hostname = http://xxxx.com
and if that doesnt work then this most certainly will:
hostname = http://xxxx.com:80
You can set it this way in the GUI if you have a search head cluster. It will replicate from one search peer to the others. You can set it in the GUI if you dont have search head cluster too.
Thanks it solved my issue
@sgoel did this solve your problem?
Yes it did @jkat54
I need @sgoel,
The poster of the question to mark this as the accepted answer if it worked for him/her.