I'm setting up Slack alerts and would like to deploy uniformly to our heavy forwarders. To do so, I'd have to add a placeholder to their alert_actions.conf
[slack]
disabled = 0
param.from_user = XXXXXXXXXXXXXXXXXXX #$HOSTNAME or $HOST
param.webhook_url = https://hooks.slack.com/services/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
I was wondering if something like the linux hostname variable can be used within this file like above.
↧