Other Usage

How to create custom alert email template on Splunk Cloud?

SplunkExplorer
Communicator

Hi Splunkers, we are setting a Splunk Cloud environment for a customer and we are working on Trigger Actions for alerts.

We don't need, for now, some particular custom actions: afer alert triggering, sending an email to our SOC is enough. We know that fields in the events/alerts are easily usable thanks to $<field_name> notation, so how to customize the email action is not a problem.
What we don't know is: if we have a custom template we want to use for our emails, with some logos and HTML code, is it possible simply put it in the message box? I mean, simply put our html code here:

SplunkExplorer_0-1687430799959.png


or we have to follow another way? And which one?

Labels (2)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@SplunkExplorer - The message box here is part of the email and not the full email content, so it's not a complete replacement for the email template.

But you can there whatever you need, most likely even the HTML content will work.

 

But if you want all together a custom email template than you have to write a custom alert action and write your own python code to send email in necessary template.

 

I hope this helps!!! Kindly upvote if it does!!!

Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...