topic Re: How to pull a report on Splunk alerts? in Alerting https://community.splunk.com/t5/Alerting/How-to-pull-a-report-on-Splunk-alerts/m-p/298758#M5405 <P>Hi bjaylsu,</P> <P>have a look at this answer <A href="https://answers.splunk.com/answers/305328/how-to-search-the-names-of-triggered-alerts-their.html#answer-306463">https://answers.splunk.com/answers/305328/how-to-search-the-names-of-triggered-alerts-their.html#answer-306463</A> it will provide you a search that creates a report of triggered alerts and their thresholds.</P> <P>Be aware that you need to have the admin role assigned to be able to access <CODE>index=_audit</CODE> </P> <P>Hope this helps ...</P> <P>cheers, MuS</P> Thu, 05 Oct 2017 22:09:51 GMT MuS 2017-10-05T22:09:51Z How to pull a report on Splunk alerts? https://community.splunk.com/t5/Alerting/How-to-pull-a-report-on-Splunk-alerts/m-p/298757#M5404 <P>I'm application analyst that monitors splunk alerts. We monitor OOM, CPU usage and other data. We receive alerts via MS outlook.</P> <P>Is there a way to pull reports on the splunk alerts for the last 6 months. I'd like to see how many alerts we receive daily, monthly, etc. Is that possible via splunk?</P> <P>Here are the details of Splunk version which I am using: 6.6.1</P> Thu, 05 Oct 2017 20:54:33 GMT https://community.splunk.com/t5/Alerting/How-to-pull-a-report-on-Splunk-alerts/m-p/298757#M5404 bjaylsu 2017-10-05T20:54:33Z Re: How to pull a report on Splunk alerts? https://community.splunk.com/t5/Alerting/How-to-pull-a-report-on-Splunk-alerts/m-p/298758#M5405 <P>Hi bjaylsu,</P> <P>have a look at this answer <A href="https://answers.splunk.com/answers/305328/how-to-search-the-names-of-triggered-alerts-their.html#answer-306463">https://answers.splunk.com/answers/305328/how-to-search-the-names-of-triggered-alerts-their.html#answer-306463</A> it will provide you a search that creates a report of triggered alerts and their thresholds.</P> <P>Be aware that you need to have the admin role assigned to be able to access <CODE>index=_audit</CODE> </P> <P>Hope this helps ...</P> <P>cheers, MuS</P> Thu, 05 Oct 2017 22:09:51 GMT https://community.splunk.com/t5/Alerting/How-to-pull-a-report-on-Splunk-alerts/m-p/298758#M5405 MuS 2017-10-05T22:09:51Z