<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Does Splunk log it's Alert Actions? in Alerting</title>
    <link>https://community.splunk.com/t5/Alerting/Does-Splunk-log-it-s-Alert-Actions/m-p/61871#M12196</link>
    <description>&lt;P&gt;Yes it does, in the _internal index.&lt;/P&gt;

&lt;P&gt;The following search will pull up all alarm actions in a given time range:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index="_internal" sourcetype="scheduler" thread_id="AlertNotifier*" NOT (alert_actions="summary_index" OR alert_actions="")
&lt;/CODE&gt;&lt;/PRE&gt;</description>
    <pubDate>Fri, 01 Oct 2010 19:50:48 GMT</pubDate>
    <dc:creator>ftk</dc:creator>
    <dc:date>2010-10-01T19:50:48Z</dc:date>
    <item>
      <title>Does Splunk log it's Alert Actions?</title>
      <link>https://community.splunk.com/t5/Alerting/Does-Splunk-log-it-s-Alert-Actions/m-p/61870#M12195</link>
      <description>&lt;P&gt;I am configuring SNMP traps based off of scheduled searches - does Splunk log this whenever a trap is generated? I ask because I don't want to duplicate logging that is already being done by Splunk.&lt;/P&gt;</description>
      <pubDate>Fri, 01 Oct 2010 19:21:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Does-Splunk-log-it-s-Alert-Actions/m-p/61870#M12195</guid>
      <dc:creator>bmayer00</dc:creator>
      <dc:date>2010-10-01T19:21:51Z</dc:date>
    </item>
    <item>
      <title>Re: Does Splunk log it's Alert Actions?</title>
      <link>https://community.splunk.com/t5/Alerting/Does-Splunk-log-it-s-Alert-Actions/m-p/61871#M12196</link>
      <description>&lt;P&gt;Yes it does, in the _internal index.&lt;/P&gt;

&lt;P&gt;The following search will pull up all alarm actions in a given time range:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index="_internal" sourcetype="scheduler" thread_id="AlertNotifier*" NOT (alert_actions="summary_index" OR alert_actions="")
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 01 Oct 2010 19:50:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Does-Splunk-log-it-s-Alert-Actions/m-p/61871#M12196</guid>
      <dc:creator>ftk</dc:creator>
      <dc:date>2010-10-01T19:50:48Z</dc:date>
    </item>
  </channel>
</rss>

