Alerting on failure and triggering a chat notification
By now, you have used every different type of alert available and many of the more common alert actions such as emailing. However, one powerful alert action feature we have yet to touch upon is the ability to leverage webhooks when an alert triggers.
In this recipe, you will create a simple, real-time, per-result alert that triggers when any 503 HTTP web server errors are detected. Upon triggering, the alert will leverage a webhook to make an HTTP POST request on a URL. The webhook will pass JSON formatted information about the alert in the body of the POST request and trigger a notification message to pop up in a chat application.
Getting ready
To step through this recipe, you will need a running Splunk Enterprise server, with the sample data loaded from Chapter 1, Play Time - Getting Data In. You should be familiar with navigating the Splunk user interface.
Before you can use Splunk's webhook alert action, you will need to configure the...
