How can I send Splunk visualization to Slack?

[kteng2024]

Hi there,

Is there anyway to send splunk visualization to slack channel besides the slack notification alert in splunkbase.

[jblemieux]

Has anyone gotten this working? We are receiving the following error when attempting to setup the Function1 add on:

An error occurred updating credentials. Please ensure your user account has admin_all_objects and/or list_storage_passwords capabilities.

[gjanders]

list_storage_passwords in a capability in the authorize.conf file, refer to the capabilities page for more information.
You should be able to add list_storage_passwords to the role that you need (e.g. the user role)

Or Add and Edit Roles with Splunk Web

[jblemieux]

Has anyone gotten this Function1 app working? If so do you have any instructions? The README is pretty basic and we are running into an error when the add on loads in Splunk, We created a Slack Legacy API Token per the instructions and loaded it into the configuration.

An error occurred updating credentials. Please ensure your user account has admin_all_objects and/or list_storage_passwords capabilities.

[esix_splunk · Accepted solution]

There's no internal way to do this, but Function1 has created an awesome Slack integration to do just this : https://www.function1.com/2017/05/meet-the-slack-app-for-splunk and the direct link to the app at : https://splunkbase.splunk.com/app/3542/

Check it out!

[reissavfc]

Does this app solve what you were looking to do? I think I'm looking for the same thing.. Ideally I'd like slack to send a "screenshot" so to speak of a dashboard so people could get a quick eye on how a platform is doing without needed to log into splunk.