Changing Email Results link

[melshobary]

Hello,
When I create an email alert and allow the link to result, the link automatically takes the search head URL.

the users have no access to the search heads instead they can access a local load balancer splunk.name.net.

is there a way to replace the search head address with the load balancer address in the view results link?

Thanks in advance.

[livehybrid]

Hi @melshobary 

You can set the 'hostname' in alert_actions.conf under the [email] stanza:

# alert_action.conf
[email]
hostname = splunk.yourCompany.com

Check out https://help.splunk.com/en/data-management/splunk-enterprise-admin-manual/10.0/configuration-file-re... for more info

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[melshobary]

Hi @livehybrid 
Thanks you so much. It is very helpful and actually worked

I have configured it locally on all search head cluster members, is it the normal way or there should be another way from the cluster deployer?