Alerts migration when updating from 3.x to 4.1.x

New Member

Can alerts be migrated when updating from 3.x to 4.1.x?

Tags (1)
0 Karma

Re: Alerts migration when updating from 3.x to 4.1.x


There were a number of changes to savedsearches between 3.x and 4.x, see

In addition, the arguments to scripted alerts were altered, so if you have custom scripted alerts, these will need to be changed.

There may be other details.

However, I would not recommend deploying 4.1 at this time. Splunk has released 2 major releases since then with countless bugfixes, many improvements in workflow and performance, etc. There is not much reason to build out 4.1 instead of 4.3.

View solution in original post

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.