How to call an API when alert trigger

[thinhdinh]

Hello experts,

I am looking for a solution to respond an incident using alert in Splunk. In stead of alert sending, I want to call to specific APIs when alerts is triggered. Kinds of ticket creating in Jira or message sending using third parties or server restarting when server out of memory, and so on. How can we implement it?

[harsmarvania57 · Accepted solution]

Hi,

To achieve various task you need to use Alert Action . For Incident crreation in JIRA there are few add-ons available on https://splunkbase.splunk.com . For other activity like server reboot & any other activity you may need to write custom alert action, for more info on custom alert action refer https://docs.splunk.com/Documentation/Splunk/8.0.4/AdvancedDev/ModAlertsIntro