Alerting

Alerts are working, but "No triggered alerts found." in triggered alerts activity screen

di2esysadmin
Path Finder

My alerts are working as I intended. I get the email. The email contains the link to the results. Going to that link serves up the following error:

Error in 'SearchOperator:loadjob': Cannot find job_id 'rt_scheduler_a2FybGEucnVzc2VsbA__search__RMD5033f04f8e659bd94_at_1393513652_3103.1'.

When I go to Activity->Triggered Alerts, I'm told "No triggered alerts found. "

Any ideas?

thx

Tags (2)

BARNEYRUDD
Explorer

I had this problem and managed to solve it by adding an "Add to triggered alert" trigger action

0 Karma

jadengoho
Builder

Same here , can somebody help me ?

0 Karma

leordimalanta
Explorer

Where did you create your alert? Is it in the same app you are trying to view the triggered alert?

If not go to the app where you created the alert and move it to the app where you are viewing the triggered alerts or go to the alert management page of the app where you created the alert check their if the triggered alerts were there. Also check the permissions and sharing of the alert. Hope it helps.

snargleplax
Explorer

Same app. As I said, I was following the link from the alert email. The upvotes on this must be from folks with a different issue.

0 Karma

nithin_shubhana
Explorer

Even I am also facing the same problem. Can anyone help us out please.

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...