topic Issue wtih Alert Manager Add-On for Splunk Cloud? in All Apps and Add-ons

Issue wtih Alert Manager Add-On for Splunk Cloud?

rdiazalo — Mon, 21 Nov 2022 12:06:01 GMT

Hi,

I got an issue configuring alert manager app. The incident posture filter is not working.

It does not matter what info I change inside the red box. The alerts that are shown below does not change at all.

Any help will be grateful.

Re: Issue wtih Alert Manager Add-On for Splunk Cloud

gcusello — Fri, 18 Nov 2022 09:54:59 GMT

Hi @rdiazalo,

to see alerts in Alert Manager, you have to configure all your alerts as Global, otherwise you don't see in this App.

If you found some error in JS execution, there's a message that you can find on the GitHub site.

Ciao.

Giuseppe

Re: Issue wtih Alert Manager Add-On for Splunk Cloud

rdiazalo — Fri, 18 Nov 2022 10:07:10 GMT

Hi @gcusello,

Al the alerts are in global.

I can see al the alerts on the dashboard. What I cannot do is to filter them. If I choose to just see the ones with new status, it still show me all the alerts. In this example I select to just see critical alerts in the las 24 hours but it still shows me all alerts of the last 24 hours.

Re: Issue wtih Alert Manager Add-On for Splunk Cloud

gcusello — Fri, 18 Nov 2022 10:24:37 GMT

Hi @rdiazalo,

it's strange I haven't your behaviour:

and the only customization I did was the Global sharing.

Which version are you using? I'm using 3.0.11.

Ciao.

Giuseppe

Re: Issue wtih Alert Manager Add-On for Splunk Cloud

rdiazalo — Fri, 18 Nov 2022 10:46:18 GMT

This are the version of alert manager that I have:

I made a health test and find that TA- alert_manager got a warning.

What version of Alert Manager Add-on do you have?

Re: Issue wtih Alert Manager Add-On for Splunk Cloud

gcusello — Fri, 18 Nov 2022 10:54:50 GMT

Hi @rdiazalo,

I haven't the Add-On.

Ciao.

Giuseppe

Re: Issue wtih Alert Manager Add-On for Splunk Cloud

rdiazalo — Mon, 21 Nov 2022 11:24:11 GMT

Hi @gcusello ,

I have perform a restart today to delete Alert manager Add-On but the filter still don't work.

Did you change any query or something for it to work?

Regards

Re: Issue wtih Alert Manager Add-On for Splunk Cloud

gcusello — Mon, 21 Nov 2022 12:52:08 GMT

Hi @rdiazalo,

No I didn't, the only customization was the Global sharing for all alerts.

Ciao.

Giuseppe

Re: Issue wtih Alert Manager Add-On for Splunk Cloud

rdiazalo — Wed, 07 Dec 2022 09:54:57 GMT

Hi @gcusello ,

I found what the issue was.

I had an issue importing the query.

Can you send me your Search String? I think that my query still has some issues. So I would like to compare mine with yours.

Regards,

Re: Issue wtih Alert Manager Add-On for Splunk Cloud?

rohe — Sun, 22 Jan 2023 08:49:36 GMT

Hi @gcusello ,

What could be the problem for me?

I can't define a user

Re: Issue wtih Alert Manager Add-On for Splunk Cloud?

gcusello — Mon, 23 Jan 2023 08:26:11 GMT

Hi @rohe,

sorry I didn't see this error.

Please could you share a screenshot in english, you can do this replacing the language in the link with "en-US".

Ciao.

Giuseppe