Switch branches/tags
Nothing to show
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
61 lines (31 sloc) 1.73 KB

Splunk Twilio Modular Alert v0.8


This is a Splunk Modular Alert for sending SMS messages using Twilio.


  • Splunk 6.3+
  • Supported on Windows, Linux, MacOS, Solaris, FreeBSD, HP-UX, AIX


  • Untar the release to your $SPLUNK_HOME/etc/apps directory
  • Restart Splunk

Activation Key

You require an activation key to use this App. Visit to obtain a free,non-expiring key


You will need a Twilio account to use this Modular Alert.

You can sign up at

Once your Twilio account is setup you will then be able to obtain your Auth Token and Account SID from your profile.

To enter these values in Splunk , just browse to Settings -> Alert Actions -> Twilio SMS Alerts -> Setup Twilio SMS Alerting


Perform a search in Splunk and then navigate to : Save As -> Alert -> Trigger Actions -> Add Actions -> Twilio SMS Alerts

On this dialogue you can enter your "from number", "to number" and "SMS message"

"to number" can also be a comma delimited list of numbers

For the SMS message field , token substitution can be used just the same as for email alerts.


Browse to : Settings -> Alert Actions -> Twilio SMS Alerts -> View Log Events

Or you can search directly in Splunk : index=_internal sourcetype=splunkd component=sendmodalert action="twilio"


  1. Is your "from number" correct and valid for sending SMS messages via Twilio ?
  2. Are your alerts actually firing ?
  3. Are your Auth token and Account SID correct ?


This project was initiated by Damien Dallimore ,