Docs » Send alert notifications to third-party services using Splunk Observability Cloud » Send alert notifications to Slack using Splunk Observability Cloud

Send alert notifications to Slack using Splunk Observability Cloud 🔗

You can configure Splunk Observability Cloud to automatically send alert notifications to Slack when a detector alert condition is met and when the alert clears.

To send Observability Cloud alert notifications to Slack, complete the following configuration tasks:

Caution

If the user who creates the integration leaves your organization and their Slack account is deactivated, the Slack integration stops working.

Step 1: Create a Slack integration in Observability Cloud 🔗

You must be an Observability Cloud administrator, Slack administrator, and be authorized to add apps to Slack to complete this task.

This method of integrating with Slack replaces a prior design. Slack integrations created using the prior design display an option to upgrade in the Observability Cloud UI. While the prior design continues to work, upgrade your integrations to use the newer integration design. You must upgrade your integration if you want image previews to display when pasting a chart URL into Slack. To learn more, see Paste a chart URL into Slack.

To create a Slack integration in Observability Cloud:

  1. Log in to Splunk Observability Cloud.

  2. Open the Slack guided setup . Optionally, you can navigate to the guided setup on your own:

    1. In the left navigation menu, select Data Management.

    2. Select Add Integration.

    3. In the integration filter menu, select All.

    4. In the Search field, search for Slack, and select it.

  3. Select New Integration to display the configuration options. If you get an error, you aren’t authorized to add apps to Slack and aren’t be able to create this integration. Contact your Slack administrator for help.

  4. Review the permissions required by Slack and select Authorize.

  5. By default, the name of the integration is Slack. Give your integration a unique and descriptive name. For information about the downstream use of this name, see About naming your integrations.

  6. Save.

Note

Splunk Observability Cloud uses the following Slack APIs: oauth.access, conversations.list, chat.postMessage, and chat.unfurl.

Step 2: Add a Slack integration as a detector alert recipient in Observability Cloud 🔗

To add a Slack integration as a detector alert recipient in Observability Cloud:

  1. Create or edit a detector that you want to configure to send alert notifications using your Slack integration.

    For more information about working with detectors, see Create detectors to trigger alerts and Subscribe to alerts using the Detector menu.

  2. In the Alert recipients step, select Add Recipient.

  3. Select Slack and then select the name of the Slack integration you want to use to send alert notifications. This is the integration name you created in Step 1: Create a Slack integration in Observability Cloud.

  4. Enter the name of the Slack channel you want to send the notifications to.

  5. Activate and save the detector.

Splunk Observability Cloud sends an alert notification to the Slack channel when an alert is triggered by the detector and when the alert clears.

Note

You can’t add a private Slack channel as a detector alert recipient.