Alerting

splunk alert- email content

sfmandmdev
Path Finder

Is it possible to configure savedsearches.conf to say what gets sent out in an email alerts...
Maybe, something like-

action.email.body="This alert was generated by XXX. Please contact YYY"

Tags (1)
0 Karma

lguinn2
Legend

You can use an external script.

There is a very similar question here: How to add Custom email alert content

0 Karma
Get Updates on the Splunk Community!

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened Audit Trail v2 wasn’t written in isolation—it was shaped by your voices. In ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...