Alert Manager

Overview

Details

*** Please Note: This app is deprecated. Please plan to switch to Alert Manager Enterprise https://splunkbase.splunk.com/app/6730. A Migration-Tool is available. ***

The Alert Manager adds simple incident workflows to Splunk. The general purpose is to provide a common app with dashboards in order to investigate fired alerts or notable events. It can be used with every Splunk alert and works as an extension on top of Splunk's built-in alerting mechanism.

- Awareness of your current operational situation with the incident posture dashboard
- Analyze root cause of incidents with only a few clicks
- Review and adjust the urgency of incidents to improve operations scheduling
- Dispatch incidents to the person in charge
- Track and report incident workflow KPIs
- Tag and categorize incidents

Please Note: This app is deprecated. Please plan to switch to Alert Manager Enterprise: https://splunkbase.splunk.com/app/6730. A Migration-Tool is available

Release Notes

Version 3.0.11

April 26, 2022

Release Notes

v3.0.11/ 2022-04-26
- Minor Issue fixed with alert processing
v3.0.10/ 2022-04-25
- Fixed an issue with suppression rules dashboard
- Small code fixes
v3.0.9/ 2022-04-20
- More jQuery 3.5 compatibilty fixes
- Fixed Splunk Cloud Appvetting issue with core js modules
- Added app.conf trigger for custom alert_manager.conf
- Fixed timestamp issues due to different standards
- Utf encoding for new incident and comment
- Align time to show trends more clearly
- Fixed alert.priority not looking up using search result and template path swapped issue
v3.0.8/ 2021-08-26
- jQuery 3.5 compatibilty
- Fixed an issue with Firefox not loading drilldown actions
- Fixed an issue with incident posture refresh

Version 3.0.9

April 20, 2022

v3.0.9/ 2022-04-20
- More jQuery 3.5 compatibilty fixes
- Fixed Splunk Cloud Appvetting issue with core js modules
- Added app.conf trigger for custom alert_manager.conf
- Fixed timestamp issues due to different standards
- Utf encoding for new incident and comment
- Align time to show trends more clearly
- Fixed alert.priority not looking up using search result and template path swapped issue
v3.0.8/ 2021-08-26
- jQuery 3.5 compatibilty
- Fixed an issue with Firefox not loading drilldown actions
- Fixed an issue with incident posture refresh
v3.0.7/ 2021-01-28
- Bugfix for issue with incident posture modal loading on Splunk Cloud 8.1.2011
v3.0.5/ 2020-12-14
- Improved config replication of alert_manager.conf in a SHC
- Fixed a bug where incidents are not closed after TTL

Version 3.0.8

Aug. 26, 2021

3.0.8
- Fixed an issue with Firefox not loading drilldown actions
- Fixed jQuery 3.5 compatibilty
- Fixed an issue with incident posture refresh
3.0.7
- Bugfix for issue with incident posture modal loading on Splunk Cloud 8.1.2011
3.0.5
- Improved config replication of alert_manager.conf in a SHC
- Fixed a bug where incidents are not closed after TTL
3.0.4
- Allow the integration of custom reports
- Added support for private alerts
- Added direct link (alert_manager_link) to email templates
- Fixed a bug where the false_positive_resolved status is marked as internal_only
3.0.3
- Fixes performance issues on Windows
- Fixes an issue with closed incidents
3.0.2
- Bugfix release
3.0.1
- Bugfix release for Windows installations

Version 3.0.7

Jan. 28, 2021

3.0.7
- Bugfix for issue with incident posture modal loading on Splunk Cloud 8.1.2011
3.0.5
- Improved config replication of alert_manager.conf in a SHC
- Fixed a bug where incidents are not closed after TTL
3.0.4
- Allow the integration of custom reports
- Added support for private alerts
- Added direct link (alert_manager_link) to email templates
- Fixed a bug where the false_positive_resolved status is marked as internal_only
3.0.3
- Fixes performance issues on Windows
- Fixes an issue with closed incidents
3.0.2
- Bugfix release
3.0.1
- Bugfix release for Windows installations
3.0.0
- Python 3.7 only release
- Merged TA-alert_manager into alert_manager app
- Added Bulk Edit function
- Added new feature to manually create incidents
- Added new feature to append an alert to existing ones, if title is identical
- Added new feature to filter by incident results
- Added new feature to group incident
- And more...

Version 3.0.5

Dec. 14, 2020

3.0.5
- Improved config replication of alert_manager.conf in a SHC
- Fixed a bug where incidents are not closed after TTL
3.0.4
- Allow the integration of custom reports
- Added support for private alerts
- Added direct link (alert_manager_link) to email templates
- Fixed a bug where the false_positive_resolved status is marked as internal_only
3.0.3
- Fixes performance issues on Windows
- Fixes an issue with closed incidents
3.0.2
- Bugfix release
3.0.1
- Bugfix release for Windows installations
3.0.0
- Python 3.7 only release
- Merged TA-alert_manager into alert_manager app
- Added Bulk Edit function
- Added new feature to manually create incidents
- Added new feature to append an alert to existing ones, if title is identical
- Added new feature to filter by incident results
- Added new feature to group incident
- And more...

Version 3.0.4

Aug. 13, 2020

3.0.4
- Allow the integration of custom reports
- Added support for private alerts
- Added direct link (alert_manager_link) to email templates
- Fixed a bug where the false_positive_resolved status is marked as internal_only
3.0.3
- Fixes performance issues on Windows
- Fixes an issue with closed incidents
3.0.2
- Bugfix release
3.0.1
- Bugfix release for Windows installations
3.0.0
- Python 3.7 only release
- Merged TA-alert_manager into alert_manager app
- Added Bulk Edit function
- Added new feature to manually create incidents
- Added new feature to append an alert to existing ones, if title is identical
- Added new feature to filter by incident results
- Added new feature to group incident
- Added new feature to have additional drilldowns for incidents
- Added new feature to manually trigger notifications
- Deprecating auto_previous_resolve auto_subsequent_resolve due to new append feature
- Added support to hide unused Alert Statuses
- And more...

Version 3.0.3

July 10, 2020

3.0.3
- Fixes performance issues on Windows
- Fixes an issue with closed incidents
3.0.2
- Bugfix release
3.0.1
- Bugfix release for Windows installations
3.0.0
- Python 3.7 only release
- Merged TA-alert_manager into alert_manager app
- Added Bulk Edit function
- Added new feature to manually create incidents
- Added new feature to append an alert to existing ones, if title is identical
- Added new feature to filter by incident results
- Added new feature to group incident
- Added new feature to have additional drilldowns for incidents
- Added new feature to manually trigger notifications
- Deprecating auto_previous_resolve auto_subsequent_resolve due to new append feature
- Added support to hide unused Alert Statuses
- Added support to override owner, category, subcategory, tags, display_fields, external_reference_id with event results
- Added support to add and pass comments to external workflow actions
. Added support to load inicdent results also from index
- and more....

Version 3.0.2

July 8, 2020

3.0.2
- Bugfix release
3.0.1
- Bugfix release for Windows installations
3.0.0
- Python 3.7 only release
- Merged TA-alert_manager into alert_manager app
- Added Bulk Edit function
- Added new feature to manually create incidents
- Added new feature to append an alert to existing ones, if title is identical
- Added new feature to filter by incident results
- Added new feature to group incident
- Added new feature to have additional drilldowns for incidents
- Added new feature to manually trigger notifications
- Deprecating auto_previous_resolve auto_subsequent_resolve due to new append feature
- Added support to hide unused Alert Statuses
- Added support to override owner, category, subcategory, tags, display_fields, external_reference_id with event results
- Added support to add and pass comments to external workflow actions
- Added support to send HTML notifications in UTF-8
. Added support to load inicdent results also from index
- and more....

Version 3.0.0

June 30, 2020

Python 3.7 only release
Merged TA-alert_manager into alert_manager app
Added Bulk Edit function
Added new feature to manually create incidents
Added new feature to append an alert to existing ones, if title is identical
Added new feature to filter by incident results
Added new feature to group incident
Added new feature to have additional drilldowns for incidents
Added new feature to manually trigger notifications
Deprecating auto_previous_resolve auto_subsequent_resolve due to new append feature
Added support to hide unused Alert Statuses
Added support to override owner, category, subcategory, tags, display_fields, external_reference_id with event results
Added support to add and pass comments to external workflow actions
Added support to send HTML notifications in UTF-8
. Added support to load inicdent results also from index
Added health check dashboard
Deprecating lookups for category, subcategory and tags
And more...

Version 2.2.2

April 13, 2018

Important: There were significant changes in this release. Please refer to the Upgrade instructions: http://docs.alertmanager.info/en/latest/update_manual/

New Features
External Workflow Actions
Support for external event ids
Alert Status Customization
Quick Assign
Ability to index alert results instead of writing to KV Store
Auto resolve informational events

Enhancements
Search Head Cluster support
Removed custom alert index / indexes.conf. Default to main index with ability to customize
Changed permission style from capabilities to roles to comply with certification requirements
Internal: New Splunkd-style REST endpoints because of deprecated Splunk Web endpoints
Improved Alert History
Reduced Alert Metadata footprint
Added alert_manager_user role with read-only permissions to knowledge objects
display_fields in Incident Settings is now optional
* Added a check to the incident edit modal to wait for the owner and status dropdown to be ready before save button gets active

Version 2.1.4

Nov. 7, 2016

Re-enabled migration scripts to seed default E-mail Templates and Notification Scheme.

Version 2.0.5

May 10, 2016

App certification release only - no functional changes included!

Version 1.1

March 12, 2015

Fixed support for per-result alert actions
Added support for search results in e-mail templates
Enhanced incident details with description form saved search and selectable list of fields
Bugfixes

27,042

Downloads

Share Subscribe

Version

Built by

Alert Manager

Support

Not Supported

Questions on Splunk Answers Flag as inappropriate

App Contents: Alert Actions