Splunk Dev

Reading allowed webhook urls from the custom alert code

dkonvalina
New Member

Hello,

I am building a custom alert action for advanced webhook functionality (allowing header values, removing some data from the payload etc.) and I want to validate the url provided in the config of the alert to be one of the listed in webhook allowed urls. There is a standard list of allowed urls for Splunk standard action Webhook which I want to use.

Do you know how can I pull the list of allowed webhook urls (patterns) from my python code?

I want to reuse the existing configuration instead of creating a custom list of allowed patterns. Only admin should be able to modify this list, whereas the URL for each alert is created by the user.

Thanks!

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...