<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Splunk alerts have disappeared in Alerting</title>
    <link>https://community.splunk.com/t5/Alerting/Splunk-alerts-have-disappeared/m-p/454226#M8015</link>
    <description>&lt;P&gt;Our system has a few Splunk alerts set up and about a week ago, they all disappeared.  They are not shown in the list of alerts inside Splunk and they are not carrying out their assigned actions.&lt;/P&gt;

&lt;P&gt;If I try to create a new alert, it does not show up.  I'll fill out the fields, save it, not see any error but then when I look at the list of alerts, it's not there:&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/7043i186B889AE5BB3D29/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;However, it I try to create another alert with the same title as the alert I've just created, I receive an error, "Unable to create saved search with name [name]. A saved search with that name already exists."&lt;/P&gt;

&lt;P&gt;Where are my alerts and how can I re-enable them?  I'm using Splunk Enterprise v7.1.2.&lt;/P&gt;</description>
    <pubDate>Mon, 13 May 2019 20:32:57 GMT</pubDate>
    <dc:creator>aedelsteinpr</dc:creator>
    <dc:date>2019-05-13T20:32:57Z</dc:date>
    <item>
      <title>Splunk alerts have disappeared</title>
      <link>https://community.splunk.com/t5/Alerting/Splunk-alerts-have-disappeared/m-p/454226#M8015</link>
      <description>&lt;P&gt;Our system has a few Splunk alerts set up and about a week ago, they all disappeared.  They are not shown in the list of alerts inside Splunk and they are not carrying out their assigned actions.&lt;/P&gt;

&lt;P&gt;If I try to create a new alert, it does not show up.  I'll fill out the fields, save it, not see any error but then when I look at the list of alerts, it's not there:&lt;/P&gt;

&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper" image-alt="alt text"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/7043i186B889AE5BB3D29/image-size/large?v=v2&amp;amp;px=999" role="button" title="alt text" alt="alt text" /&gt;&lt;/span&gt;&lt;/P&gt;

&lt;P&gt;However, it I try to create another alert with the same title as the alert I've just created, I receive an error, "Unable to create saved search with name [name]. A saved search with that name already exists."&lt;/P&gt;

&lt;P&gt;Where are my alerts and how can I re-enable them?  I'm using Splunk Enterprise v7.1.2.&lt;/P&gt;</description>
      <pubDate>Mon, 13 May 2019 20:32:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Splunk-alerts-have-disappeared/m-p/454226#M8015</guid>
      <dc:creator>aedelsteinpr</dc:creator>
      <dc:date>2019-05-13T20:32:57Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk alerts have disappeared</title>
      <link>https://community.splunk.com/t5/Alerting/Splunk-alerts-have-disappeared/m-p/454227#M8016</link>
      <description>&lt;P&gt;In the filters, for "App:" select all apps and try. Right now it's trying to look for alerts created in app "Home". &lt;/P&gt;</description>
      <pubDate>Mon, 13 May 2019 20:49:13 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Splunk-alerts-have-disappeared/m-p/454227#M8016</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2019-05-13T20:49:13Z</dc:date>
    </item>
  </channel>
</rss>

