Alerting

Are there any apps or add-ons to integrate Microsoft Teams with Splunk Cloud?

anandhalagarasa
Path Finder

Hi Team,

Is there any app or add-on to integrate Microsoft Teams with Splunk Cloud.
Since once the alert is getting triggered from Splunk Cloud it should reach immediately to Microsoft Teams to the particular channel or teams with the message information.

So kindly let me know the app or add-on for this request.

0 Karma

tjreeddoc
New Member

anandhalagarasan ,

Microsoft Teams sends its alerts to the O365 Audit Logs. Audit Logs keeps these alerts for 90 Days.

My company just configured Splunk Add-on for Microsoft Office 365. This Splunk Add-on receives Audit Log alerts from the following Workloads:
Teams, Azure Active Directory, Exchange, OneDrive, O365 groups, SharePoint Online, Yammer.

T.J.

0 Karma

tjreeddoc
New Member

anandhalagarasan ,

Microsoft Teams sends its alerts to the O365 Audit Logs. Audit Logs keeps these alerts for 90 Days.

My company just configured Splunk Add-on for Microsoft Office 365. This Splunk Add-on receives Audit Log alerts from the following Workloads:
Teams, Azure Active Directory, Exchange, OneDrive, O365 groups, SharePoint Online, Yammer.

T.J.

0 Karma

amitm05
Builder

I think this is the one shall suit your purpose -
https://splunkbase.splunk.com/app/3375/

This is a webhook based, so your Teams channel URL should go to the Webhook of the Real time alert

0 Karma

anandhalagarasa
Path Finder

@amitm05 , Thanks. But this app seems to be supported only in Splunk Enterprise and not for Splunk Cloud.

I need an app which needs to be supported in Splunk Cloud. So kindly help to check and update on the same.

0 Karma

amitm05
Builder

Sorry, Not that I can find.
Have you already tested this one with Splunk Cloud ? It should be worth a shot

0 Karma

anandhalagarasa
Path Finder

For Splunk Cloud I tried to install the app but unfortunately it got failed during installation.

0 Karma

anandhalagarasa
Path Finder

Hi Team,

Can anyone check and respond.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...