https://community.splunk.com/t5/Getting-Data-In/Delete-fired-alerts-via-endpoint/m-p/27902#M4731 <P>Found snippet example using Python internal SDK:</P> <P>Fired_alert.py</P> <P>Provides object mapping for fired alerts objects</P> <P>Example use case:</P> <P>sessionKey = splunk.auth.getSessionKey('admin','changeme')</P> <P>s = SavedSearch.get('/servicesNS/admin/search/admin/savedsearch/someAlert')<BR /> alerts = s.get_alerts()</P> <P># print them all<BR /> for a in alerts:</P> <P>print a.severity, str(a.trigger_time), str(action)</P> <P>#now delete the most recent one </P> <P>alerts[0].delete()</P> Fri, 01 Jul 2011 16:26:37 GMT rroberts 2011-07-01T16:26:37Z https://community.splunk.com/t5/Getting-Data-In/Delete-fired-alerts-via-endpoint/m-p/27901#M4730 <P>I can list fired-alerts via endpoint <A href="https://localhost:8089/servicesNS/admin/search/alerts/fired_alerts/-">https://localhost:8089/servicesNS/admin/search/alerts/fired_alerts/-</A><BR /> There is a way to delete fired-alerts via API?</P> Tue, 14 Jun 2011 22:18:56 GMT https://community.splunk.com/t5/Getting-Data-In/Delete-fired-alerts-via-endpoint/m-p/27901#M4730 rroberts 2011-06-14T22:18:56Z https://community.splunk.com/t5/Getting-Data-In/Delete-fired-alerts-via-endpoint/m-p/27902#M4731 <P>Found snippet example using Python internal SDK:</P> <P>Fired_alert.py</P> <P>Provides object mapping for fired alerts objects</P> <P>Example use case:</P> <P>sessionKey = splunk.auth.getSessionKey('admin','changeme')</P> <P>s = SavedSearch.get('/servicesNS/admin/search/admin/savedsearch/someAlert')<BR /> alerts = s.get_alerts()</P> <P># print them all<BR /> for a in alerts:</P> <P>print a.severity, str(a.trigger_time), str(action)</P> <P>#now delete the most recent one </P> <P>alerts[0].delete()</P> Fri, 01 Jul 2011 16:26:37 GMT https://community.splunk.com/t5/Getting-Data-In/Delete-fired-alerts-via-endpoint/m-p/27902#M4731 rroberts 2011-07-01T16:26:37Z https://community.splunk.com/t5/Getting-Data-In/Delete-fired-alerts-via-endpoint/m-p/27903#M4732 <P>via REST point as described on the Documentation page:</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/4.2.4/RESTAPI/RESTsearch#alerts.2Ffired_alerts">http://docs.splunk.com/Documentation/Splunk/4.2.4/RESTAPI/RESTsearch#alerts.2Ffired_alerts</A></P> Wed, 16 Nov 2011 15:01:14 GMT https://community.splunk.com/t5/Getting-Data-In/Delete-fired-alerts-via-endpoint/m-p/27903#M4732 mzorzi 2011-11-16T15:01:14Z https://community.splunk.com/t5/Getting-Data-In/Delete-fired-alerts-via-endpoint/m-p/27904#M4733 <P>Hi Robert, could you post your entire code here ?</P> Fri, 21 Feb 2014 08:10:46 GMT https://community.splunk.com/t5/Getting-Data-In/Delete-fired-alerts-via-endpoint/m-p/27904#M4733 sbsbb 2014-02-21T08:10:46Z