Reporting

Rich-text / custom email alerts

davidjohnbecket
Path Finder

Can you modify/create a Splunk action (e.g. send email) to produce an email alert in a more "business user" friendly way?

In my example there is a service that will log an error and we have a created an alert that gets sent to a business team (non IT) to inform them that an action is required due to the error

Currently we use a standard email alert, "send email", and generate the content of the email in a table format:

alt text

In most cases this is fine, but we have a requirement to make the email alerts more readable and business friendly, include company logo and a footer.

Is this possible in Splunk?

Ideally we would want to construct the email alert using fields from the error and then make it look pretty 🙂

e.g

alt text

0 Karma

sudosplunk
Motivator

Hello,

You can try including the text you want into the Email footer under settings -> Server settings (in 'SYSTEM' section) -> Email settings which would look like this. alt text

0 Karma
Get Updates on the Splunk Community!

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: https://bsidessplunk.com CFP Site: https://bsidessplunk.com/cfp CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...