Alerting

change the host name for alert trigger

Skins
Path Finder

I have Splunk sitting on a standalone box with hostname "splunk" I am testing triggering alerts to a third party app.

When the alert triggers it sends the host value "Splunk" to the third party app.

I want to be able to change this field to "splunk.domain.org" so that we can launch back into splunk in context from a link that's presented on the third party app as currently http://splunk when I'd like it to be http://splunk.domain.org...

I've tried setting the splunk hostname and tried a few props.conf settings but haven't been able to succeed as yet.

gratzi

Tags (1)
0 Karma

yaasirvatham_sp
Splunk Employee
Splunk Employee

Create etc/system/local/alert_actions.conf

hostname=http://splunk.domain.org

restart Splunk service

Try this, It will work

0 Karma

woodcock
Esteemed Legend

All of this is done in server.conf and it varies depending on host OS and other things:

https://docs.splunk.com/Documentation/Splunk/latest/Admin/Serverconf

0 Karma

Skins
Path Finder

that was one of the first things we tried - setting the splunk hostname in the GUI adds adds an entry to ..

/etc/system/local/server.conf

[general]
serverName = splunk.domain.org

this did not work it still used the hostname of the server

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...