https://community.splunk.com/t5/Splunk-Search/Capabilities/m-p/679352#M232233 <P>We want to provide few capabilities to the team</P><P>Presently team has a capability to create email alert.</P><P>What capabilities need to be given to create auto cut alerts.</P> Fri, 01 Mar 2024 22:01:47 GMT Ash1 2024-03-01T22:01:47Z https://community.splunk.com/t5/Splunk-Search/Capabilities/m-p/679352#M232233 <P>We want to provide few capabilities to the team</P><P>Presently team has a capability to create email alert.</P><P>What capabilities need to be given to create auto cut alerts.</P> Fri, 01 Mar 2024 22:01:47 GMT https://community.splunk.com/t5/Splunk-Search/Capabilities/m-p/679352#M232233 Ash1 2024-03-01T22:01:47Z https://community.splunk.com/t5/Splunk-Search/Capabilities/m-p/679356#M232236 <P>Are you talking about permissions? &nbsp;<A href="https://community.splunk.com/t5/Security/bd-p/admin-security" target="_blank">Security</A>&nbsp;might be a better forum. (There used to be a broader Admin forum but it's gone in the new board.)</P><P>What is an "auto cut alert", anyway?</P> Sat, 02 Mar 2024 00:03:56 GMT https://community.splunk.com/t5/Splunk-Search/Capabilities/m-p/679356#M232236 yuanliu 2024-03-02T00:03:56Z https://community.splunk.com/t5/Splunk-Search/Capabilities/m-p/679361#M232239 <P>It’s not about security. We have option to create alerts in &nbsp;splunk. So we have action items as alert trigger, email alert, auto cut etc</P><P>auto cut means creating service now incidents from Splunk to service now&nbsp;</P><P>so for email alert we have schedule_search capability likewise what capability we need to give to create auto to create&nbsp;<SPAN>service now incident from Splunk to service now.</SPAN></P><P>&nbsp;</P><P>&nbsp;</P> Sat, 02 Mar 2024 02:19:50 GMT https://community.splunk.com/t5/Splunk-Search/Capabilities/m-p/679361#M232239 Ash1 2024-03-02T02:19:50Z