Telegram Alert Action
Overview
Details
Telegram Alert Action
Introduction
The Telegram Alert Action allows Splunk to send alerts to Telegram groups and chats through the use of a Telegram Bot.
Installation and configuration
To install the Telegram Alert Action, follow the instructions in the Splunk Add-ons
Usage
Create an existing alert with the Telegram alert action
1.) In the Search & Reporting app, run a search for your string.
2.) Confirm that the search results look as you expect.
3.) Click the Save As dropdown link above the right side of the search box, then select Alert from the menu that appears.
4.) Enter a title for your alert, along with a description if desired, and configure the standard alert fields related to permissions, scheduling, and trigger conditions according to your needs.
5.) Under Trigger Actions, click + Add Actions, then select Telegram Alert.
6.) Enter the Message and select the Severity that you want Telegram to send when the alert is triggered.
7.) Enter the Chat ID and the Bot ID that you will be sending the Alert, Message, and Result link to, then click Save.
Add a Telegram action to an existing alert
1.) In the Search & Reporting app, navigate to the Alerts tab and locate the existing alert.
2.) Click Edit, then select Edit Actions.
3.) Click + Add Actions, then select Telegram Alert.
4.) Enter the Message and select the Severity that you want Telegram to send when the alert is triggered.
5.) Enter the Chat ID and the Bot ID that you will be sending the Alert, Message, and Result link to, then click Save.
For more information on the Telegram Bot API visit the Telegram Bot API website.
If you would like to contribute: https://github.com/ragedsparrow/splunk_telegram-alert-action
Release Notes
Version 2.0.0
Implemented new logging.
Updated script to Python 3 compatible.
Enable Proxy settings.
Version 1.2.1
Updating the meta files.