https://community.splunk.com/t5/Splunk-Search/How-do-you-search-by-specific-alert-type/m-p/209209#M61116 <P>Hey, </P> <P>I was looking run a historical search for a specific alert over a period of time. What search can I run in order to search by alert type?</P> Mon, 13 Jun 2016 16:44:14 GMT wzgoda 2016-06-13T16:44:14Z https://community.splunk.com/t5/Splunk-Search/How-do-you-search-by-specific-alert-type/m-p/209209#M61116 <P>Hey, </P> <P>I was looking run a historical search for a specific alert over a period of time. What search can I run in order to search by alert type?</P> Mon, 13 Jun 2016 16:44:14 GMT https://community.splunk.com/t5/Splunk-Search/How-do-you-search-by-specific-alert-type/m-p/209209#M61116 wzgoda 2016-06-13T16:44:14Z https://community.splunk.com/t5/Splunk-Search/How-do-you-search-by-specific-alert-type/m-p/209210#M61117 <P>This should have all the information you want:</P> <PRE><CODE>index=_internal host=* source=*scheduler.log </CODE></PRE> <P>Best bet, s.o.s (Splunk On Splunk Application)</P> <P>Built in: From you splunk web, upper right hand corner, click on - <CODE>Activity</CODE> &gt; <CODE>System Activity</CODE> &gt; <CODE>Scheduler</CODE> &gt; <CODE>Scheduler Activity by Saved search</CODE>. This should give you any &amp; all the information you need.</P> <P>Also, hit the following endpoints:</P> <PRE><CODE>|rest /services/alerts/alert_actions |rest /services/alerts/fired_alerts |rest /services/saved/searches </CODE></PRE> <P>Hope this helps!</P> <P>Thanks,<BR /> Raghav</P> Mon, 13 Jun 2016 17:22:40 GMT https://community.splunk.com/t5/Splunk-Search/How-do-you-search-by-specific-alert-type/m-p/209210#M61117 Raghav2384 2016-06-13T17:22:40Z