splunk webhook with credentials/authentication

palemmahesh · ‎07-09-2021

I want to use splunk webhook future to send the fired alerts/events to another third party system.

the third party rest api needs authentication.

So I have given the weebhook url as https:.//username:password@url, but its not sending the trigged alerts to this url. Cannot we give username/password in the url?

how to debug or check why splunk is not able to send trigged alerts?

kamlesh_vaghela · ‎07-11-2021

@palemmahesh

The splunk web hook alert doesn't provide this feature but you can try below app.

https://splunkbase.splunk.com/app/3226/

https://github.com/rzzldzzl/alert_webhook_ng

Kv

splunk webhook with credentials/authentication

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Almost Too Eventful Assurance: Part 1

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Are you a member of the Splunk Community?

splunk webhook with credentials/authentication

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Almost Too Eventful Assurance: Part 1

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1