https://community.splunk.com/t5/Splunk-Search/How-to-get-an-alert-if-the-specific-search-takes-more-than-10/m-p/430697#M123115 <P>Run the following search every 5-10 minutes. Set it to trigger an alert if the result count is equal to zero.</P> <PRE><CODE>index=foo "Acquired" earliest=-10m@m </CODE></PRE> Fri, 21 Jun 2019 12:46:04 GMT richgalloway 2019-06-21T12:46:04Z https://community.splunk.com/t5/Splunk-Search/How-to-get-an-alert-if-the-specific-search-takes-more-than-10/m-p/430696#M123114 <P>Ex: "Acquired" is a keyword. <BR /> This keyword is getting for every minute. <BR /> I have to get alert if this keyword is not getting generated for more than 10 min.</P> Fri, 21 Jun 2019 05:19:15 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-an-alert-if-the-specific-search-takes-more-than-10/m-p/430696#M123114 prerana_jain 2019-06-21T05:19:15Z https://community.splunk.com/t5/Splunk-Search/How-to-get-an-alert-if-the-specific-search-takes-more-than-10/m-p/430697#M123115 <P>Run the following search every 5-10 minutes. Set it to trigger an alert if the result count is equal to zero.</P> <PRE><CODE>index=foo "Acquired" earliest=-10m@m </CODE></PRE> Fri, 21 Jun 2019 12:46:04 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-an-alert-if-the-specific-search-takes-more-than-10/m-p/430697#M123115 richgalloway 2019-06-21T12:46:04Z https://community.splunk.com/t5/Splunk-Search/How-to-get-an-alert-if-the-specific-search-takes-more-than-10/m-p/430698#M123116 <P>Your phrasing is unclear. Add a comment and explain it with many more words/sentences.</P> Sun, 23 Jun 2019 23:13:01 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-an-alert-if-the-specific-search-takes-more-than-10/m-p/430698#M123116 woodcock 2019-06-23T23:13:01Z