Reporting

Rich-text / custom email alerts

davidjohnbecket
Path Finder

Can you modify/create a Splunk action (e.g. send email) to produce an email alert in a more "business user" friendly way?

In my example there is a service that will log an error and we have a created an alert that gets sent to a business team (non IT) to inform them that an action is required due to the error

Currently we use a standard email alert, "send email", and generate the content of the email in a table format:

alt text

In most cases this is fine, but we have a requirement to make the email alerts more readable and business friendly, include company logo and a footer.

Is this possible in Splunk?

Ideally we would want to construct the email alert using fields from the error and then make it look pretty :slightly_smiling_face:

e.g

alt text

0 Karma

sudosplunk
Motivator

Hello,

You can try including the text you want into the Email footer under settings -> Server settings (in 'SYSTEM' section) -> Email settings which would look like this. alt text

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...