Getting Data In
Highlighted

Are there any apps or add-ons to integrate Microsoft Teams with Splunk Enterprise?

Path Finder

Hi Team,

Is there any app or add-on to integrate Microsoft Teams with Splunk. Since once the alert is getting triggered from Splunk end it should reach immediately to Microsoft Teams to the particular channel or teams.

So if there is a way then kindly let me know.

0 Karma
Highlighted

Re: Are there any apps or add-ons to integrate Microsoft Teams with Splunk Enterprise?

Ultra Champion

Have a look at this:
https://splunkbase.splunk.com/app/3375/

I have not used this as we wrote our own integration, but its a reasonably straightforward webhook.
Grab the hook url from your teams client, and provide that to the alert

0 Karma
Highlighted

Re: Are there any apps or add-ons to integrate Microsoft Teams with Splunk Enterprise?

SplunkTrust
SplunkTrust

There is the app to help you connect to MS Teams: https://splunkbase.splunk.com/app/3375/.

Right click on the channel you want the alert to go to and select Connectors. On the right, choose Configure on "Incoming Webhook". Give the incoming webhook a name. I tend to use the alert name as the webhook name. Upload a custom image if you want. Then click Create. That will generate the URL you need to enter in to the Splunk app.

When you setup up the alert in Splunk, make sure the "Microsoft Teams Webhook Alert Connector" app is installed, use the Microsoft Teams action and paste in the webhook URL.

*Note - You need to format the alert in to tables for best results.

View solution in original post

Highlighted

Re: Are there any apps or add-ons to integrate Microsoft Teams with Splunk Enterprise?

Path Finder

@anthony reinke , Thanks it works as expected.

0 Karma