topic Re: Alert dashboard in Dashboards & Visualizations

Alert dashboard

logloganathan — Mon, 12 Aug 2019 11:26:14 GMT

Could anyone help to build dashboard for alerts.

how many alert email i got like that?

Re: Alert dashboard

richgalloway — Mon, 12 Aug 2019 12:50:22 GMT

Please explain what you mean by "dashboard for alerts".

Re: Alert dashboard

Sukisen1981 — Mon, 12 Aug 2019 15:43:34 GMT

hi @logloganathan
The easiest way is to have the same search THAT triggers your alert saved as a panel in your dashboard.
For example, index="aaa"|stats count|where count >0 run at an hourly frequency which triggers if count>0. The same search saved as a panel with a bin of 1 hour , for say over the last 24 hrs will give you the number of alerts you received due to this alert in the last 24 hrs.
But are you asking for something else :)?

Re: Alert dashboard

logloganathan — Tue, 13 Aug 2019 13:28:23 GMT

i want to get diaplayed of alert triggered and email sent

Re: Alert dashboard

Sukisen1981 — Tue, 13 Aug 2019 13:35:36 GMT

hi @logloganathan - You are probably using an email subject with static sentence and some dynamic tokens and the same in the mail body.
Assuming you build a 1 panel dashboard you can just have count as first column, the subject in second column and the body in the 3rd column.
Basically, if you are able to pass tokens to the email subject and body (along with standard static text) , there is no reason why you can not do the same with the same search query in a panel. How you want the look and feel of the panel is up to you.

Re: Alert dashboard

493669 — Tue, 13 Aug 2019 14:09:20 GMT

Hi @logloganathan ,
Below app will help to view fired alerts in dashboards in order to investigate.
https://splunkbase.splunk.com/app/2665/

Re: Alert dashboard

logloganathan — Wed, 14 Aug 2019 13:29:33 GMT

Thanks for the response i need some query help...