All Apps and Add-ons

Modifying webhook datapayload

SuganyaSSF
Explorer

Hi ,

We are using webhook in an alert action to posts the results using rest api.
But the rest api requires data payload (JSON Object) with some additional details that we need to send from our end.
Is it possible to customize the data payload that web hook provides.
Or we need to create customized alert action.

It would be very helpful if i get any information on this.

mroman_splunk
Splunk Employee
Splunk Employee

Hello per the documentation on the developer website:

"The webhook functionality is built into Splunk Enterprise as an app, and is located here: $SPLUNK_HOME/etc/apps/alert_webhook. If you are so inclined, you can clone it, and then modify it however you want. For example, you might choose to do this if your application accepts a specific payload that does not match to the Splunk Enterprise default."

http://dev.splunk.com/view/dev-guide/SP-CAAAE7A

0 Karma

paolananci
New Member

Any news on the topic? I am interested as well.

0 Karma

mroman_splunk
Splunk Employee
Splunk Employee

Hello per the documentation on the developer website:

"The webhook functionality is built into Splunk Enterprise as an app, and is located here: $SPLUNK_HOME/etc/apps/alert_webhook. If you are so inclined, you can clone it, and then modify it however you want. For example, you might choose to do this if your application accepts a specific payload that does not match to the Splunk Enterprise default."

http://dev.splunk.com/view/dev-guide/SP-CAAAE7A

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...