topic Re: Alerts in version 4? in Alerting

Alerts in version 4?

MikeKulls — Wed, 30 Jan 2013 22:53:57 GMT

I've been asked to trigger a script when certain messages are received in splunk. Alerts appear to do exactly what I need. Unfortunately we are using v4.35 of splunk and this appears to be a version 5 feature. Can someone tell me if that is correct and if there is any way to do something similar in v4?

Thanks in advance,
Michael

Re: Alerts in version 4?

Lowell — Sat, 02 Feb 2013 19:14:34 GMT

This does not require 5.0, and you do not need the RunSavedSearch app. This functionality has been built-in since before I started using splunk in version 3.x.

Here are the docs for your version:
http://docs.splunk.com/Documentation/Splunk/4.3.5/admin/Configurescriptedalerts

Re: Alerts in version 4?

MikeKulls — Sun, 03 Feb 2013 22:31:30 GMT

Thanks for the reply. When I click the create dropdown button I don't get the option to create an alert. I'm gathering that means it has been locked down by an administrator?