You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
66 lines
1.7 KiB
66 lines
1.7 KiB
# alert_actions.conf
|
|
|
|
[trackme_smart_status]
|
|
python.version = python3
|
|
description = Run the TrackMe Smart Status
|
|
label = Trackme Smart Status
|
|
is_custom = 1
|
|
payload_format = json
|
|
icon_path = alert_trackme.png
|
|
param.tenant_id = $result.tenant_id$
|
|
param.object_category = $result.object_category$
|
|
param.object_name = $result.object$
|
|
|
|
[trackme_auto_ack]
|
|
python.version = python3
|
|
description = Perform an automatic acknowledgement of an entity triggering
|
|
label = TrackMe auto acknowledge
|
|
is_custom = 1
|
|
payload_format = json
|
|
icon_path = alert_trackme.png
|
|
param.ack_period = 86400
|
|
param.ack_type = unsticky
|
|
|
|
[trackme_free_style_rest_call]
|
|
python.version = python3
|
|
description = Performs a rest call to any TrackMe REST API endpoint
|
|
label = TrackMe free style rest call
|
|
is_custom = 1
|
|
payload_format = json
|
|
icon_path = alert_trackme.png
|
|
param.http_mode = get
|
|
|
|
[trackme_notable]
|
|
python.version = python3
|
|
description = Generates a TrackMe notable event
|
|
label = TrackMe notable event
|
|
is_custom = 1
|
|
payload_format = json
|
|
icon_path = alert_trackme.png
|
|
param.title = $name$
|
|
param.drilldown_root_uri =
|
|
param.drilldown_earliest = -24h
|
|
|
|
[trackme_stateful_alert]
|
|
icon_path = alert_trackme.png
|
|
python.version = python3
|
|
is_custom = 1
|
|
payload_format = json
|
|
label = TrackMe stateful alert
|
|
description = Create a TrackMe Stateful Alert
|
|
param.delivery_target = emails_and_ingest
|
|
param.environment_name = Splunk
|
|
param.email_account =
|
|
param.email_recipients =
|
|
param.email_send_update_if_ack_active = 1
|
|
param.orange_as_alerting_state = 0
|
|
param.generate_charts = 1
|
|
param.theme_charts = dark
|
|
param.drilldown_root_uri =
|
|
param.commands_mode = streaming
|
|
param.commands_opened =
|
|
param.commands_updated =
|
|
param.commands_closed =
|
|
param.auto_ack_enabled = 1
|
|
param.auto_ack_period = 86400
|
|
param.auto_ack_type = sticky |