Alerting

Action log of emails sent as trigger from alert

arrowecssupport
Communicator

Where can i see the list of emails sent as a trigger action from an alert. Is this in the audit log or a log file on the cli?

Tags (1)
0 Karma
1 Solution

inventsekar
SplunkTrust
SplunkTrust

when you create the alert, you can enable "Add to Triggered Alerts" action, so that, you can review all recently triggered alerts on the Triggered Alerts page.
http://docs.splunk.com/Documentation/Splunk/6.4.2/Alert/Triggeredalertaction
http://docs.splunk.com/Documentation/Splunk/6.4.2/Alert/Reviewtriggeredalerts

Details of triggered alerts are available for 24 hours by default.

updated -
this query will give us a list of alerts fired in last 1day -

index=_audit action=alert_fired earliest=-1d@d
thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !

View solution in original post

inventsekar
SplunkTrust
SplunkTrust

when you create the alert, you can enable "Add to Triggered Alerts" action, so that, you can review all recently triggered alerts on the Triggered Alerts page.
http://docs.splunk.com/Documentation/Splunk/6.4.2/Alert/Triggeredalertaction
http://docs.splunk.com/Documentation/Splunk/6.4.2/Alert/Reviewtriggeredalerts

Details of triggered alerts are available for 24 hours by default.

updated -
this query will give us a list of alerts fired in last 1day -

index=_audit action=alert_fired earliest=-1d@d
thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...