splunkbase.splunk.com/app/3375/  has been archived. This one will do what you need. It's easy to setup  https://splunkbase.splunk.com/app/4787  - It creates O365 Cards. You can set different Icons and colors for different alerts.   Provides an alert action to easily send Office 365 Cards to a Microsoft Teams channel using the Incoming Webhook Connector in Teams. Easily send beautiful alerts with customizable text or search data included with the Card. (copied from splunkbase) https://www.groundsecurity.com/splunk-app-microsoft-teams-alert-cards/  So far, works everytime.   I have not figured out how to create the "alert" notification where the little channel lights up, but the cards do show up in the teams channel.      ... View more

can you help me with instructions on how to configure it? that will be of great help. is it just you download the plugin and install it in splunk cloud install app session ? ... View more

Hello outcoldman i have tried your above suggested options but no o still same issue i am facing . i have a local splunk set up on my machine and i am able to curl and send the data. i can also see the logs in splunk. but when i do below command i get errors and it will not run it says connection refused. docker run --log-driver=splunk \ --log-opt splunk-url=http://localhost:8088/ \ --log-opt splunk-token=token \ --log-opt splunk-insecureskipverify=true \ hello-world i have another splunk cloud whihc is org one and i have a token for HEC as well when i run the above command it runs but i do not see any logs not sure why . if i am able to make it work on local thaat will be great and then later i can figure out why its not able to work on cloud ... View more