Reporting

How to modify the "View Results in Splunk" link from Scheduled Reports

Explorer

We need to change the hostname and port that the "View results in Splunk" link auto populates. Where is the proper place to change this setting in the config files?

1 Solution

SplunkTrust
SplunkTrust

The configuration file that you're looking for is alert_action.conf and attribute name is hostname.
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Alertactionsconf

hostname = [protocol]<host>[:<port>]
* Sets the hostname used in the web link (url) sent in alerts.
* This value accepts two forms.
  * hostname
       examples: splunkserver, splunkserver.example.com
  * protocol://hostname:port
       examples: http://splunkserver:8000, https://splunkserver.example.com:443

View solution in original post

Path Finder

You can also go to Settings > Server Settings > Email settings
and change "Link hostname" to the url you want.

0 Karma

SplunkTrust
SplunkTrust

The configuration file that you're looking for is alert_action.conf and attribute name is hostname.
http://docs.splunk.com/Documentation/Splunk/latest/Admin/Alertactionsconf

hostname = [protocol]<host>[:<port>]
* Sets the hostname used in the web link (url) sent in alerts.
* This value accepts two forms.
  * hostname
       examples: splunkserver, splunkserver.example.com
  * protocol://hostname:port
       examples: http://splunkserver:8000, https://splunkserver.example.com:443

View solution in original post

Path Finder

thank you.

0 Karma