Alerting

Structure modification of message alert

evang_26
Communicator

Hello Splunk users,

I am eager to know if there is any way to modify the message generated by alerts in terms of structure in order to make it a little bit shiny. Whenever I receive an email alert, is kind of just letters and only a simple html-like table. I want to modify the colors, table and so on.
Could you please me tell where to look to, so as to modify the code there?

Any suggestions are greatly appreciated!
Evang

Tags (3)
0 Karma
1 Solution

tararso
Explorer

You can modify sendemail.py located under $SPLUN_KHOME\etc\apps\search\bin.

View solution in original post

tararso
Explorer

You can modify sendemail.py located under $SPLUN_KHOME\etc\apps\search\bin.

MuS
SplunkTrust
SplunkTrust

Just a reminder: sendemail.py could be overwritten by any Splunk update. So keep that in mind if you change it 😉

evang_26
Communicator

Thanks again Tararso,

I'll try to make it done and let you know.

Regards,
Evang

0 Karma

tararso
Explorer

not in the manager. You need to open sendemail.py from splunk installed folder which is located under $SPLUN_KHOME\etc\apps\search\bin

0 Karma

evang_26
Communicator

Hi Tararso,

Thanks for your reply. I am new to Splunk, would you mind guide me through the $SPLUN_KHOMEetcappssearchbin?
Is it somewhere on the manager?

Thanks,
Evang

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...