Send alert notifications to Slack using Splunk Observability Cloud 🔗
You can configure Splunk Observability Cloud to automatically send alert notifications to Slack when a detector alert condition is met and when the alert clears.
To send Observability Cloud alert notifications to Slack, complete the following configuration tasks:
You must be an Observability Cloud administrator, Slack administrator, and authorized to add apps to Slack to complete this task.
If the user who creates the integration leaves your organization and their Slack account is deactivated, the Slack integration stops working.
Step 1: Create a Slack integration in Observability Cloud 🔗
You must be an Observability Cloud administrator, Slack administrator, and be authorized to add apps to Slack to complete this task.
This method of integrating with Slack replaces a prior design. Slack integrations created using the prior design display an option to upgrade in the Observability Cloud UI. While the prior design continues to work, upgrade your integrations to use the newer integration design. You must upgrade your integration if you want image previews to display when pasting a chart URL into Slack. To learn more, see Paste a chart URL into Slack.
To create a Slack integration in Observability Cloud:
Log in to Splunk Observability Cloud.
Open the Slack guided setup . Optionally, you can navigate to the guided setup on your own:
In the left navigation menu, select.
Select Add Integration.
In the integration filter menu, select All.
In the Search field, search for Slack, and select it.
Select New Integration to display the configuration options. If you get an error, you aren’t authorized to add apps to Slack and aren’t be able to create this integration. Contact your Slack administrator for help.
Review the permissions required by Slack and select Authorize.
By default, the name of the integration is Slack. Give your integration a unique and descriptive name. For information about the downstream use of this name, see About naming your integrations.
Splunk Observability Cloud uses the following Slack APIs:
Step 2: Add a Slack integration as a detector alert recipient in Observability Cloud 🔗
To add a Slack integration as a detector alert recipient in Observability Cloud:
Create or edit a detector that you want to configure to send alert notifications using your Slack integration.
In the Alert recipients step, select Add Recipient.
Select Slack and then select the name of the Slack integration you want to use to send alert notifications. This is the integration name you created in Step 1: Create a Slack integration in Observability Cloud.
Enter the name of the Slack channel you want to send the notifications to.
Activate and save the detector.
Splunk Observability Cloud sends an alert notification to the Slack channel when an alert is triggered by the detector and when the alert clears.
You can’t add a private Slack channel as a detector alert recipient.