Monitoring Splunk

Issue with Telegram Alert Action: Can not configure the action

Tony4688
Explorer

Hello everyone,

I installed Telegram Alert Action app (https://splunkbase.splunk.com/app/3703/) for my SearchHead server (Splunk Enterprise 8.0.6) successfully. But when i add Telegram Alert action for all alerts, i can not see any its configurations as below image:

Tony4688_0-1636346898339.png

Could any one tell me what is this issue?

Thanks very much!

Tags (2)
0 Karma

Tony4688
Explorer

I had solved the issue by this way:

1> Add the Telegram alert action for the alerts in Web UI, and Save the changes.

2> Make SSH session to SearchHead server, find and open the file that contains configurations of the alerts that were added Telegram alert action, and add more 5 lines below the line "action.telegram = 1" and save the changes:

action.telegram.param.bot_id = Bot-ID

action.telegram.param.chat_id = Chat-ID

action.telegram.param.severity = Low/Medium/High/Critical

action.telegram.param.event_title = Alert title

action.telegram.param.message = Alert message

3> Finally, reload/restart Splunk in SH server, and enjoy the results!

Anyway, thanks for your helps!

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...