topic Re: Manually create a notable event with a pre-determined timestamp in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Manually-create-a-notable-event-with-a-pre-determined-timestamp/m-p/481007#M7726 <P>Eventually, we found the answer.<BR /> Uploading a file with meaningless text created events (approx an event for each line of text), as needed.</P> Wed, 18 Sep 2019 04:44:35 GMT gkeller 2019-09-18T04:44:35Z Manually create a notable event with a pre-determined timestamp https://community.splunk.com/t5/Splunk-Enterprise-Security/Manually-create-a-notable-event-with-a-pre-determined-timestamp/m-p/481004#M7723 <P>I am trying to manually create 500 new notable events that all have the same timestamp.<BR /> I have not been able to find a way to do this, even though I read the Splunk manual for manually creating notable events.<BR /> Does anyone have any idea how to do this, or could point me to the right direction?</P> Sun, 15 Sep 2019 06:28:28 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Manually-create-a-notable-event-with-a-pre-determined-timestamp/m-p/481004#M7723 gkeller 2019-09-15T06:28:28Z Re: Manually create a notable event with a pre-determined timestamp https://community.splunk.com/t5/Splunk-Enterprise-Security/Manually-create-a-notable-event-with-a-pre-determined-timestamp/m-p/481005#M7724 <P>You can manually create notables by appending <CODE>| sendalert notable</CODE> at the end of a search. I would write a script to send an API search 500 times.</P> Wed, 18 Sep 2019 01:14:20 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Manually-create-a-notable-event-with-a-pre-determined-timestamp/m-p/481005#M7724 xavierashe 2019-09-18T01:14:20Z Re: Manually create a notable event with a pre-determined timestamp https://community.splunk.com/t5/Splunk-Enterprise-Security/Manually-create-a-notable-event-with-a-pre-determined-timestamp/m-p/481006#M7725 <P>Thanks for the answer!<BR /> Unfortunately, using a script won't work as the events won't have the exact same timestamp</P> Wed, 18 Sep 2019 04:43:34 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Manually-create-a-notable-event-with-a-pre-determined-timestamp/m-p/481006#M7725 gkeller 2019-09-18T04:43:34Z Re: Manually create a notable event with a pre-determined timestamp https://community.splunk.com/t5/Splunk-Enterprise-Security/Manually-create-a-notable-event-with-a-pre-determined-timestamp/m-p/481007#M7726 <P>Eventually, we found the answer.<BR /> Uploading a file with meaningless text created events (approx an event for each line of text), as needed.</P> Wed, 18 Sep 2019 04:44:35 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Manually-create-a-notable-event-with-a-pre-determined-timestamp/m-p/481007#M7726 gkeller 2019-09-18T04:44:35Z