Deployment Architecture

Is there way to customize the Payload when Splunk calls webhook?

rrkollip
New Member

I am calling webhook when certain alert triggers in splunk, I want to exact payload by looking at the alert result so that I can better program the JAVA rest API.

Tags (1)
0 Karma

acharlieh
Influencer

Using the built-in webhook action, no. This is explicitly stated in the dev guide: http://dev.splunk.com/view/dev-guide/SP-CAAAE7A

At this time, the JSON payload format can't be changed.

That said, the custom alert action framework / Modular alert framework, means that anyone can create their own custom alert action, and do whatever you want with results, including invoke a webhook with a customized payload. Splunkbase has a number of custom alert actions, some of which invoke webhooks for different platforms and if none of these are suitable, you can always develop your own following the guide and resources in the docs: http://docs.splunk.com/Documentation/Splunk/7.0.2/AdvancedDev/ModAlertsIntro

The Splunk Add-on Builder may also help in provide some utilities for building your custom alert action.

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with William Searle

The Splunk Guy: A Developer’s Path from Web to Cloud William is a Splunk Professional Services Consultant with ...

Major Splunk Upgrade – Prepare your Environment for Splunk 10 Now!

Attention App Developers: Test Your Apps with the Splunk 10.0 Beta and Ensure Compatibility Before the ...

Stay Connected: Your Guide to June Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...