https://community.splunk.com/t5/Splunk-Search/Table-ES-Suppressions-including-start-time-and-end-time/m-p/362230#M163960 <P>Thats exactly what I was after. Thanks!</P> Fri, 02 Mar 2018 10:44:33 GMT jacqu3sy 2018-03-02T10:44:33Z https://community.splunk.com/t5/Splunk-Search/Table-ES-Suppressions-including-start-time-and-end-time/m-p/362228#M163958 <P>I'm looking to create a dashboard of existing suppression's, and those that have recently expired or will expire in the near future.</P> <P>But I'm struggling to find where I can extract the relevant &gt;=time and &lt;=time used within the suppression.</P> <P><CODE>notable</CODE> includes the suppression name, but not when it expires. Cant seem to find where this is stored. Any ideas?</P> Thu, 04 Jan 2018 15:49:35 GMT https://community.splunk.com/t5/Splunk-Search/Table-ES-Suppressions-including-start-time-and-end-time/m-p/362228#M163958 jacqu3sy 2018-01-04T15:49:35Z https://community.splunk.com/t5/Splunk-Search/Table-ES-Suppressions-including-start-time-and-end-time/m-p/362229#M163959 <P>I had this question as well, because I wanted to set up alerts around soon to expire suppressions. I found an out-of-box macro that gathers the relevant info using the "rest" search command.</P> <P>| <CODE>suppression_eventtypes</CODE></P> Thu, 01 Mar 2018 19:20:59 GMT https://community.splunk.com/t5/Splunk-Search/Table-ES-Suppressions-including-start-time-and-end-time/m-p/362229#M163959 grsmith 2018-03-01T19:20:59Z https://community.splunk.com/t5/Splunk-Search/Table-ES-Suppressions-including-start-time-and-end-time/m-p/362230#M163960 <P>Thats exactly what I was after. Thanks!</P> Fri, 02 Mar 2018 10:44:33 GMT https://community.splunk.com/t5/Splunk-Search/Table-ES-Suppressions-including-start-time-and-end-time/m-p/362230#M163960 jacqu3sy 2018-03-02T10:44:33Z