Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Example message template #24

Open
jupp0r opened this issue Sep 8, 2021 · 1 comment
Open

Example message template #24

jupp0r opened this issue Sep 8, 2021 · 1 comment

Comments

@jupp0r
Copy link

jupp0r commented Sep 8, 2021

It would be great if you would supply the text that goes into the "Message" field to produce the nice alert you have in the Readme.md (together with a sample query it belongs to). Thanks!

@mflpopescu
Copy link

The alert from the readme.md page is something like this

Message:

Suspicious authentication event detected! :fire: <https://your-link|Create Incident>
\```
Dec 17 text is is a code block. Add three backticks in front of your text
\```

Attachment: - link to alert
Fields: host, clientip_location, ...

reference: https://raw.githubusercontent.com/splunk/slack-alerts/main/screenshots/message_example.png

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants