topic Re: Setting a default action for alert in splunk in Splunk Search https://community.splunk.com/t5/Splunk-Search/Setting-a-default-action-for-alert-in-splunk/m-p/361899#M106917 <P>You can use <CODE>[default]</CODE> stanza in savedsearches.conf to assign an attribute to all saved searches. You can use attributes described in below link to setup your email alert.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/Savedsearchesconf#Settings_for_email_action">http://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/Savedsearchesconf#Settings_for_email_action</A></P> <P>Please note that this will get applied to all scheduled searches (unless overridden at search level).</P> Wed, 03 May 2017 20:41:37 GMT somesoni2 2017-05-03T20:41:37Z Setting a default action for alert in splunk https://community.splunk.com/t5/Splunk-Search/Setting-a-default-action-for-alert-in-splunk/m-p/361898#M106916 <P>HI,</P> <P>Is there anyway in splunk to set the "email" as default trigger action for an alert. </P> Wed, 03 May 2017 20:28:10 GMT https://community.splunk.com/t5/Splunk-Search/Setting-a-default-action-for-alert-in-splunk/m-p/361898#M106916 kteng2024 2017-05-03T20:28:10Z Re: Setting a default action for alert in splunk https://community.splunk.com/t5/Splunk-Search/Setting-a-default-action-for-alert-in-splunk/m-p/361899#M106917 <P>You can use <CODE>[default]</CODE> stanza in savedsearches.conf to assign an attribute to all saved searches. You can use attributes described in below link to setup your email alert.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/Savedsearchesconf#Settings_for_email_action">http://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/Savedsearchesconf#Settings_for_email_action</A></P> <P>Please note that this will get applied to all scheduled searches (unless overridden at search level).</P> Wed, 03 May 2017 20:41:37 GMT https://community.splunk.com/t5/Splunk-Search/Setting-a-default-action-for-alert-in-splunk/m-p/361899#M106917 somesoni2 2017-05-03T20:41:37Z Re: Setting a default action for alert in splunk https://community.splunk.com/t5/Splunk-Search/Setting-a-default-action-for-alert-in-splunk/m-p/361900#M106918 <P>Can i set the webhook as default trigger action as in the documentation i see only for email.</P> Wed, 03 May 2017 21:28:24 GMT https://community.splunk.com/t5/Splunk-Search/Setting-a-default-action-for-alert-in-splunk/m-p/361900#M106918 kteng2024 2017-05-03T21:28:24Z