There's more...

This recipe used Splunk's webhook functionality to interface with a webhook compatible chat application. However, you may wish to build more thorough integration or functionality, and for this you will need to develop a custom alert action.

Splunk has a custom alert action framework that will allow you to build a compatible alert action suitable for Splunk. The Slack Notification Alert action used in the recipe was built specifically to provide a reference example for Splunk's custom alert action framework. More information about this can be found in the Splunk development documentation here:

https://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/ModAlertsIntro

Get Splunk Operational Intelligence Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.