topic Re: Is there an easy way to use the REST API to disable Splunk alerts during a maintenance window? in Alerting https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183963#M3087 <P>Is a Splunk restart required after making this call? </P> Mon, 18 Dec 2017 13:38:24 GMT pretzel2 2017-12-18T13:38:24Z Is there an easy way to use the REST API to disable Splunk alerts during a maintenance window? https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183959#M3083 <P>Hello,</P> <P>Is there an easy way to use the API to disable Splunk alerts during a maintenance window? Say for instance, disable the Send Email action for the alert via Rest API.</P> <P>Any suggestions?</P> <P>Thanks,<BR /> Jay</P> Wed, 14 Jan 2015 18:25:56 GMT https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183959#M3083 titleistfour 2015-01-14T18:25:56Z Re: Is there an easy way to use the REST API to disable Splunk alerts during a maintenance window? https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183960#M3084 <P>Looks like I just need to use the API to send</P> <P>POST saved/searches/{name} with actions = rss for the parameters to disable.<BR /> POST saved/searches/{name} with actions = rss,email for the parameters to enable.</P> <P>I think.</P> <P>Jay</P> Wed, 14 Jan 2015 18:36:51 GMT https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183960#M3084 titleistfour 2015-01-14T18:36:51Z Re: Is there an easy way to use the REST API to disable Splunk alerts during a maintenance window? https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183961#M3085 <P>This might help someone in the future who needs to use Curl.</P> <P>To disable email for an alert<BR /> curl -k -u admin:pass <A href="https://splunkserver:8089/servicesNS/nobody/search/saved/searches/MyAlert1">https://splunkserver:8089/servicesNS/nobody/search/saved/searches/MyAlert1</A> -d "actions="</P> <P>To enable email for an alert<BR /> curl -k -u admin:pass <A href="https://splunkserver:8089/servicesNS/nobody/search/saved/searches/MyAlert1">https://splunkserver:8089/servicesNS/nobody/search/saved/searches/MyAlert1</A> -d "actions=email"</P> Wed, 14 Jan 2015 22:44:41 GMT https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183961#M3085 titleistfour 2015-01-14T22:44:41Z Re: Is there an easy way to use the REST API to disable Splunk alerts during a maintenance window? https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183962#M3086 <P>@titleistfour does this apply if we are triggering alert notifications from Splunk through Microsoft outlook as well ? also if we disable during the maintenance ,do they get stored an trigger in bulk once we setup the connection after maintenance?</P> Wed, 29 Mar 2017 18:12:53 GMT https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183962#M3086 srisplunk12 2017-03-29T18:12:53Z Re: Is there an easy way to use the REST API to disable Splunk alerts during a maintenance window? https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183963#M3087 <P>Is a Splunk restart required after making this call? </P> Mon, 18 Dec 2017 13:38:24 GMT https://community.splunk.com/t5/Alerting/Is-there-an-easy-way-to-use-the-REST-API-to-disable-Splunk/m-p/183963#M3087 pretzel2 2017-12-18T13:38:24Z