https://community.splunk.com/t5/Alerting/How-to-trigger-alert-based-on-search-not-found/m-p/90262#M12290 <P>I have been using "alerts to email" for a while already,, now I need to create an alert that triggers if a particular message is not seen on certain period.<BR /> Basically, I get a confirmation on Splunk via syslog after a script runs on one of my servers, and I need Splunk to tell me if the script didnt run on a particular day.</P> <P>Thanks</P> Wed, 10 Apr 2013 21:56:17 GMT DotTest37 2013-04-10T21:56:17Z https://community.splunk.com/t5/Alerting/How-to-trigger-alert-based-on-search-not-found/m-p/90262#M12290 <P>I have been using "alerts to email" for a while already,, now I need to create an alert that triggers if a particular message is not seen on certain period.<BR /> Basically, I get a confirmation on Splunk via syslog after a script runs on one of my servers, and I need Splunk to tell me if the script didnt run on a particular day.</P> <P>Thanks</P> Wed, 10 Apr 2013 21:56:17 GMT https://community.splunk.com/t5/Alerting/How-to-trigger-alert-based-on-search-not-found/m-p/90262#M12290 DotTest37 2013-04-10T21:56:17Z https://community.splunk.com/t5/Alerting/How-to-trigger-alert-based-on-search-not-found/m-p/90263#M12291 <P>"... | stats count | search count=0"</P> Thu, 11 Apr 2013 00:58:20 GMT https://community.splunk.com/t5/Alerting/How-to-trigger-alert-based-on-search-not-found/m-p/90263#M12291 carasso 2013-04-11T00:58:20Z https://community.splunk.com/t5/Alerting/How-to-trigger-alert-based-on-search-not-found/m-p/90264#M12292 <P>If you create your search as a scheduled/saved search, you can tell it to run every hour/day whatever. You can also tell it to send you an email if the results are equal to, greater than, less than, a certain number, i.e 0. You can also set how many times it triggers and alerts this email per search.</P> Tue, 30 Apr 2013 17:53:48 GMT https://community.splunk.com/t5/Alerting/How-to-trigger-alert-based-on-search-not-found/m-p/90264#M12292 steven7537 2013-04-30T17:53:48Z