About the Content Pack for ITE Work Alert Routing

IT Essentials Work (ITE Work) is a free app that helps you monitor and analyze your IT infrastructure. The app provides data integrations and investigation tools for operating systems, virtual infrastructures, and containers. The Content Pack for ITE Work Alert Routing is intended for use with IT Essentials Work.

Content pack alerts

By default, alerts triggered from the vital metrics alert configuration in IT Essentials Work are stored in a Splunk index. IT Essentials Work users can view alerts on the Alerts and Episodes page. This content pack extends the default alert functionality by allowing you to take an external action when an alert is triggered, such as sending an email.

To determine what action to take, and to whom the alert should be sent, you can configure one or more external actions on the entity Info Fields in the entity configuration. Any time an alert is created for an entity, the content pack triggers the configured action(s) for that entity.

The following external actions are available:

• Send an email
• Create an incident in Splunk On-Call
• Create an incident in ServiceNow
• Execute a custom script or action

To learn more about entity configuration, see Install and configure the Content Pack for ITE Work Alert Routing.

ITSI and ITE Work support

The content in the Content Pack for ITE Work Alert Routing is only supported in ITE Work.

Alerts outside of IT Essentials Work

The content pack only acts on the alerting configuration of an IT Essentials Work vital metric and not from the Splunk App for Infrastructure (SAI) or Splunk Enterprise.

Any alerts and alert action configurations from SAI will continue to operate as they are configured in SAI. If the same alert is configured in both SAI and IT Essentials Work, you might receive duplicate alert actions.

Any alerts and alert action configurations from Splunk Enterprise will continue to operate as they are configured in Splunk Enterprise. If the same alert is configured in both Splunk Enterprise and IT Essentials Work, you might receive duplicate alert actions.

Installation

The Splunk App for Content Packs contains the Content Pack for ITE Work Alert Routing. The content pack is automatically available once you install the Splunk App for Content Packs.

For installation instructions, see Install the Splunk App for Content Packs in the Splunk App for Content Packs manual.

Deployment requirements

Use the following table to determine version compatibility:

Content Pack for ITE Work Alert Routing version	IT Essentials Work version	Splunk App for Content Packs version
1.0.1	4.9.4 or 4.11.0	1.4.0
1.0.0	4.9.0 or higher	1.3.0

Additional resources

• For IT Essentials Work installation guidelines, see Install Splunk IT Essentials Work.
• To learn how to configure IT Essentials Work, see Set up Splunk IT Essentials Work.