Reporting

Rich-text / custom email alerts

davidjohnbecket
Path Finder

Can you modify/create a Splunk action (e.g. send email) to produce an email alert in a more "business user" friendly way?

In my example there is a service that will log an error and we have a created an alert that gets sent to a business team (non IT) to inform them that an action is required due to the error

Currently we use a standard email alert, "send email", and generate the content of the email in a table format:

alt text

In most cases this is fine, but we have a requirement to make the email alerts more readable and business friendly, include company logo and a footer.

Is this possible in Splunk?

Ideally we would want to construct the email alert using fields from the error and then make it look pretty 🙂

e.g

alt text

0 Karma

sudosplunk
Motivator

Hello,

You can try including the text you want into the Email footer under settings -> Server settings (in 'SYSTEM' section) -> Email settings which would look like this. alt text

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...