Other Usage

How can I add a custom SMTP mail header to alert emails

raoul
Path Finder

How would I go about adding a custom SMTP mail header to alert emails?

We are making use of SendGrid and I would like to be able to use their "category" feature to track emails related to different use cases.

Ideally I'd like NOT to customise the Python script used to send emails.

Labels (1)
Tags (1)

dstoev
Explorer

@raoul , were you able to find a way without modifying the python script? I need to do the same, but for AWS SES and their custom header X-SES-CONFIGURATION-SET

0 Karma

to4kawa
Ultra Champion

sendmail

we can use only subject.

0 Karma

NOCSSMS
Explorer

Hello,

Based on the previous reply I take it that sending custom email header fields (so that the email could be easily sorted at the destination) is not possible?

I can see that the alerts that are sent out do have some custom fields:

X-Splunk-Name: coldStart
X-Splunk-Owner: administrator
X-Splunk-App: search
X-Splunk-SID: rt_scheduler__administrator__search__coldStart_at_1612254002_2618.10
X-Splunk-ServerName: splunk
X-Splunk-Version: 8.0.3
X-Splunk-Build: a6754d8441bf

I'd like to also expose variables/field names used in the search, for instance.

I agree, this would work only for alerts for each event.

Any suggestions how this could be done?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...