Dashboards & Visualizations

Can I embed the "Alert Manager" within a custom view

Lowell
Super Champion

Is is possible to embed the Alert Manager within a custom dashboard or view? I'm working on the home page (default view) for an app and I was playing around with the idea of increasing visibility to recently sent alerts and using the "delete" button to have the app users "check off" that an alert was dealt with (as a simple work flow manager thing).

Alternately, I was thinking about just showing the top 10 recent alerts send my splunk (I'd love to have a link to the search results as well.)

Has anybody else play around with anything like this? (If so, how did it work?)

BTW, I use SideView Utils.

Tags (3)

ziegfried
Influencer

The easiest option is to use the IFrameInclude module. Otherwise you could copy and modify the alerts splunkweb controller $SPLUNK_HOME/lib/python*/site-packages/splunk/appserver/mrsparkle/controllers/alerts.py and the corresponding template $SPLUNK_HOME/share/splunk/search_mrsparkle/templates/alerts/index.html or create a custom module.

sideview
SplunkTrust
SplunkTrust

IFrameInclude can be a little pokey so if it gets pokey on you, since you're on Sideview Utils already you have the other option of just putting an

Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...