Splunk Alerts for Microsoft Teams

Overview

Details

This application provides alert actions for Microsoft Teams messages publication to allow formatted messages publication from Splunk, including:

- Actionable message card support
- Defining options globally or on a per alert basis (per alert override)
- Defining comma separated list of fields which will be dynamically used to generated publication
- Choosing icon link for message publication
- Activating potential link action and defining its link (Up to 2 OpenURI actions per alert)
- Activating and configuring an HttpPOST potential action that allows additional interactions between Splunk or a third party application from Microsoft Teams
- Resilient messages publication management, temporary publication failures are automatically stored in a KVstore, and re-tried following a resilient policy

The application provides as well an easy logging access, a basic overview dashboard that exposes successful and failed publications, if any, and finally a builtin alert that can be activated to detect and warn in case of a failure to publish a message in a channel.

The Add-on is compatible with Python 2 / Python 3 modes.

Documentation for this add-on may be found at Splunk Docs

Release Notes

Version 1.1.8

June 16, 2025

First version of Splunk supported add-on, no new features or bug fixes

Version 1.1.7

Oct. 4, 2024

SHA-256: d73ce5b1b965083b65f68fbda61f3c874b9bdaa896d31c86199754d3a2ea5399

Splunk UCC, SDK and other librairies refresh to very last versions
Switch http.status_code verification from an explicit list of 2 codes to allow any 2 code, this change is to allow a workaround using Power Automate Flow to allow the deprecation of message cards by Microsoft.
Thanks to khanhduy8, a simple check box allows converting the message card format into the new adaptive card format to keep the app compatible with new MS format

10,185

Downloads

Share Subscribe

Version

Built by

Splunk LLC

Support

Splunk Supported Questions on Splunk Answers File a case Flag as inappropriate

App Contents: Alert Actions

Compatibility

Products: Splunk Enterprise, Splunk Cloud

Splunk Versions: 10.0, 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1

Platform: Platform Independent

Splunk Versions: 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1

Platform: Platform Independent

Licensing

Apache 2

Category & Contents

Categories: Utilities

App Type: Add-on

Subscribe Share

My Account

Support & Services