Custom alert actions overview

Unique use cases can require custom alerting functionality and integration.

Use the Splunk custom alert action API to create alert action apps that admins can download and install from Splunkbase. Users can access and configure installed custom alert actions in Splunk Web. The API lets you create a user experience consistent with the standard Splunk alerting workflow.

---

Developer resources

Use the following resources to learn how to build a custom alert action.

API overview

Custom alert action component reference

Build custom alert action components

Create custom alert configuration files

Create a custom alert script

Define a custom alert action user interface

Optional custom alert action components

Advanced options for working with custom alert actions

Examples

Logger example

HipChat example

KV Store integration example

Migration advice for script alert actions

Convert a script alert action to a custom alert action

---

Additional resources

To try out a custom alert action, you can use the built-in webhook alert action to send notifications to a web resource, like a chat room or blog. For more information, see Use a webhook alert action in the Alerting Manual.