https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-Alert-for-when-a-user-newly-creates-Report-Alert/m-p/605119#M13256 <LI-CODE lang="markup">| rest splunk_server=local servicesNS/-/-/saved/searches/</LI-CODE><P>The updated field might be useful in this instance</P> Mon, 11 Jul 2022 09:24:26 GMT ITWhisperer 2022-07-11T09:24:26Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-Alert-for-when-a-user-newly-creates-Report-Alert/m-p/605117#M13255 <P>Hi,</P> <P>&nbsp;</P> <P>I want to create an Alert which will trigger when any user created new alert or report in our environment. So could you please help me with suitable query for this.</P> Mon, 11 Jul 2022 14:42:36 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-Alert-for-when-a-user-newly-creates-Report-Alert/m-p/605117#M13255 Sandy 2022-07-11T14:42:36Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-Alert-for-when-a-user-newly-creates-Report-Alert/m-p/605119#M13256 <LI-CODE lang="markup">| rest splunk_server=local servicesNS/-/-/saved/searches/</LI-CODE><P>The updated field might be useful in this instance</P> Mon, 11 Jul 2022 09:24:26 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-Alert-for-when-a-user-newly-creates-Report-Alert/m-p/605119#M13256 ITWhisperer 2022-07-11T09:24:26Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-Alert-for-when-a-user-newly-creates-Report-Alert/m-p/605136#M13261 <P>Thank you for this query, but it will show all the reports and alerts. Actually i want to create an alert which will trigger if any user create one alert or report in splunk.</P> Mon, 11 Jul 2022 11:14:21 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-Alert-for-when-a-user-newly-creates-Report-Alert/m-p/605136#M13261 Sandy 2022-07-11T11:14:21Z https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-Alert-for-when-a-user-newly-creates-Report-Alert/m-p/605138#M13262 <P>As I said, you can use the updated field to determine whether it has been updated / created recently - start by building a search to find the report updates / creations you are interested in</P> Mon, 11 Jul 2022 11:48:36 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-to-create-Alert-for-when-a-user-newly-creates-Report-Alert/m-p/605138#M13262 ITWhisperer 2022-07-11T11:48:36Z