Archive2

How to get Teiggered actions details from alert_actions.conf inside default directory of custom alert action app?

avni26
Explorer

Hi Team,

I have created one custom alert action to get all triggered alert details. I am unable to get triggered actions.
How do I get the Triggered actions like email, slack, from parameter of my alert_actions.conf
I am trying to add a parameter $alert.action$ into my alert_actions.conf (param.action=$alert.action$) but that giving me blank ,after alert triggered.
The test alert has triggered actions of slack and email both.
I have tried like this also (param.action=$action$) or (param.action=$trigger_action$), but all not working.

Please help , any tips or hints appreciated.

Thanks,

Tags (1)
0 Karma
Reply
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!