topic Re: Splunk alert query to trigger alert when there are no transactions in Alerting https://community.splunk.com/t5/Alerting/How-to-write-a-Splunk-alert-query-to-trigger-alert-when-there/m-p/614928#M14310 <PRE>index="abc" (EVENT=1 OR EVENT=2)| transaction MACHINE startswith=(EVENT=1) endswith=(EVENT=2)|where duration&gt; 1800 | table duration EVENT MACHINE NAME DESCR</PRE> Wed, 28 Sep 2022 09:27:59 GMT mehmetgunertr 2022-09-28T09:27:59Z How to write a Splunk alert query to trigger alert when there are no transactions? https://community.splunk.com/t5/Alerting/How-to-write-a-Splunk-alert-query-to-trigger-alert-when-there/m-p/614895#M14308 <P>I want to create Splunk alert when there are no transactions continuously for 30mins. Kindly assist.</P> Wed, 28 Sep 2022 15:37:20 GMT https://community.splunk.com/t5/Alerting/How-to-write-a-Splunk-alert-query-to-trigger-alert-when-there/m-p/614895#M14308 aaa2324 2022-09-28T15:37:20Z Re: Splunk alert query to trigger alert when there are no transactions https://community.splunk.com/t5/Alerting/How-to-write-a-Splunk-alert-query-to-trigger-alert-when-there/m-p/614900#M14309 <P>Create a report that counts the transactions in the previous 30 minutes and trigger the alarm when the count is zero</P> Wed, 28 Sep 2022 08:11:29 GMT https://community.splunk.com/t5/Alerting/How-to-write-a-Splunk-alert-query-to-trigger-alert-when-there/m-p/614900#M14309 ITWhisperer 2022-09-28T08:11:29Z Re: Splunk alert query to trigger alert when there are no transactions https://community.splunk.com/t5/Alerting/How-to-write-a-Splunk-alert-query-to-trigger-alert-when-there/m-p/614928#M14310 <PRE>index="abc" (EVENT=1 OR EVENT=2)| transaction MACHINE startswith=(EVENT=1) endswith=(EVENT=2)|where duration&gt; 1800 | table duration EVENT MACHINE NAME DESCR</PRE> Wed, 28 Sep 2022 09:27:59 GMT https://community.splunk.com/t5/Alerting/How-to-write-a-Splunk-alert-query-to-trigger-alert-when-there/m-p/614928#M14310 mehmetgunertr 2022-09-28T09:27:59Z Re: Splunk alert query to trigger alert when there are no transactions https://community.splunk.com/t5/Alerting/How-to-write-a-Splunk-alert-query-to-trigger-alert-when-there/m-p/615110#M14311 <P>Can you please explain how the below query works , what is event=1 and 2 and what is machine ?</P> Thu, 29 Sep 2022 07:00:52 GMT https://community.splunk.com/t5/Alerting/How-to-write-a-Splunk-alert-query-to-trigger-alert-when-there/m-p/615110#M14311 aaa2324 2022-09-29T07:00:52Z