Splunk

Receive Splunk alert webhook notifications.

InboundLogging & Error Tracking

Start Free Trial

Quick Setup

Copy Webhook URL

Go to your Alert24 dashboard and copy the webhook URL for Splunk.

Configure Splunk

Add the webhook URL in your Splunk settings.

Auto-Detected

Alert24 auto-detects Splunk payloads and maps them to incidents.

Step-by-Step Setup Instructions

Splunk Webhook Setup

1.In Splunk, go to Settings → Searches, reports, and alerts

2.Edit or create a saved search / alert

3.Under Trigger Actions, click Add Actions → Webhook

4.Enter the webhook URL above

5.Click Save

Example Webhook Payload

This is a sample payload that Splunk sends to Alert24 when an alert fires.

{
  "result": {
    "alert_level": "critical",
    "message": "Error rate exceeded threshold: 150 errors in last 5 minutes",
    "sourcetype": "access_combined",
    "search_name": "High Error Rate Alert",
    "_time": "2024-01-15T10:30:00.000+00:00"
  },
  "sid": "scheduler_abc123",
  "search_name": "High Error Rate Alert",
  "app": "search",
  "results_link": "https://splunk.example.com/app/search/search?sid=scheduler_abc123"
}