Alerting

Can custom alert scripts be added to Splunk Light Cloud?

ebjurstrom
New Member

I am evaluating Splunk products with the intention of integrating with Datadog. One of the integration pieces is adding an alert script to Splunk that sends the alert to Datadog. I see the option in Splunk Light Cloud to configure the alert to use a script, but I cannot find any way to deploy / manage deployment of custom scripts.

Thank you,

0 Karma

yannK
Splunk Employee
Splunk Employee

Apps are not allowed on splunklight, so they are not allowed on splunkcloud light.
Check if the app is allowed on splunkcloud, then upgrade to splunkcloud if you need it.

0 Karma

itarribatec
New Member

the webhook does not seem to be flexible ?
Can it be adapted?
Certain apps are expecting a defined JSON (e.g. slack)
,Hi
the webhook on Splunk Light does not seem to be configurable?
If that is true it is not really useful since e.g. #slack expects a specific json

0 Karma

jterry
Splunk Employee
Splunk Employee

Not sure about being able to deploy a script via REST to a cloud instance but the webhook alert action might work for you:

http://docs.splunk.com/Documentation/Splunk/latest/Alert/Webhooks

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...