Dashboards & Visualizations

Can I embed the "Alert Manager" within a custom view

Lowell
Super Champion

Is is possible to embed the Alert Manager within a custom dashboard or view? I'm working on the home page (default view) for an app and I was playing around with the idea of increasing visibility to recently sent alerts and using the "delete" button to have the app users "check off" that an alert was dealt with (as a simple work flow manager thing).

Alternately, I was thinking about just showing the top 10 recent alerts send my splunk (I'd love to have a link to the search results as well.)

Has anybody else play around with anything like this? (If so, how did it work?)

BTW, I use SideView Utils.

Tags (3)

ziegfried
Influencer

The easiest option is to use the IFrameInclude module. Otherwise you could copy and modify the alerts splunkweb controller $SPLUNK_HOME/lib/python*/site-packages/splunk/appserver/mrsparkle/controllers/alerts.py and the corresponding template $SPLUNK_HOME/share/splunk/search_mrsparkle/templates/alerts/index.html or create a custom module.

sideview
SplunkTrust
SplunkTrust

IFrameInclude can be a little pokey so if it gets pokey on you, since you're on Sideview Utils already you have the other option of just putting an

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...