https://community.splunk.com/t5/Alerting/Why-can-t-I-save-my-search-as-an-alert/m-p/347174#M6133 <P>@masotti,</P> <P>Please check this [capability::schedule_search] is added to your role. </P> Mon, 25 Sep 2017 20:02:19 GMT sbbadri 2017-09-25T20:02:19Z https://community.splunk.com/t5/Alerting/Why-can-t-I-save-my-search-as-an-alert/m-p/347171#M6130 <P>I have created an event and now want to save it as an alert. But only see report, dashboard and event type</P> Sun, 24 Sep 2017 12:26:42 GMT https://community.splunk.com/t5/Alerting/Why-can-t-I-save-my-search-as-an-alert/m-p/347171#M6130 masotti 2017-09-24T12:26:42Z https://community.splunk.com/t5/Alerting/Why-can-t-I-save-my-search-as-an-alert/m-p/347172#M6131 <P>Are you running in a Search head cluster? Are you sure your user account has permissions to create alerts? </P> Mon, 25 Sep 2017 14:58:36 GMT https://community.splunk.com/t5/Alerting/Why-can-t-I-save-my-search-as-an-alert/m-p/347172#M6131 mwdbhyat 2017-09-25T14:58:36Z https://community.splunk.com/t5/Alerting/Why-can-t-I-save-my-search-as-an-alert/m-p/347173#M6132 <P>Do you have Free license, if so that is why.<BR /> You have a Full evaluation license to start with (valid for 30 days).<BR /> After that you need to buy a license of convert it to free version.</P> <P><A href="https://www.splunk.com/en_us/products/features-comparison-chart.html">https://www.splunk.com/en_us/products/features-comparison-chart.html</A><BR /> <STRONG>Monitoring and Alerting</STRONG> is missing on <STRONG>Free</STRONG> version</P> Mon, 25 Sep 2017 19:57:14 GMT https://community.splunk.com/t5/Alerting/Why-can-t-I-save-my-search-as-an-alert/m-p/347173#M6132 lakromani 2017-09-25T19:57:14Z https://community.splunk.com/t5/Alerting/Why-can-t-I-save-my-search-as-an-alert/m-p/347174#M6133 <P>@masotti,</P> <P>Please check this [capability::schedule_search] is added to your role. </P> Mon, 25 Sep 2017 20:02:19 GMT https://community.splunk.com/t5/Alerting/Why-can-t-I-save-my-search-as-an-alert/m-p/347174#M6133 sbbadri 2017-09-25T20:02:19Z