Monitoring Splunk

Issue with Telegram Alert Action: Can not configure the action

Tony4688
Explorer

Hello everyone,

I installed Telegram Alert Action app (https://splunkbase.splunk.com/app/3703/) for my SearchHead server (Splunk Enterprise 8.0.6) successfully. But when i add Telegram Alert action for all alerts, i can not see any its configurations as below image:

Tony4688_0-1636346898339.png

Could any one tell me what is this issue?

Thanks very much!

Tags (2)
0 Karma

Tony4688
Explorer

I had solved the issue by this way:

1> Add the Telegram alert action for the alerts in Web UI, and Save the changes.

2> Make SSH session to SearchHead server, find and open the file that contains configurations of the alerts that were added Telegram alert action, and add more 5 lines below the line "action.telegram = 1" and save the changes:

action.telegram.param.bot_id = Bot-ID

action.telegram.param.chat_id = Chat-ID

action.telegram.param.severity = Low/Medium/High/Critical

action.telegram.param.event_title = Alert title

action.telegram.param.message = Alert message

3> Finally, reload/restart Splunk in SH server, and enjoy the results!

Anyway, thanks for your helps!

0 Karma
Get Updates on the Splunk Community!

Dashboard Studio Challenge - Learn New Tricks, Showcase Your Skills, and Win Prizes!

Reimagine what you can do with your dashboards. Dashboard Studio is Splunk’s newest dashboard builder to ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...