Are alerts triggered per each node consolidated in only one RSS feed in search-head-clustering?

[bfernandez]

Anyone know if the alerts triggered per each node are consolidated in only one feed?

[rbal_splunk · Accepted solution]

As of now RSS is not supported under Search Head Clustering

[somesoni2]

The captain node of the Search Head Cluster have responsibilities of coordinating alerts and alert suppressions across the cluster. The captain tracks each alert but the member running an initiating search fires it. Was this the information you're looking for?

[bfernandez]

As you explain an alert can run in any SH member but the problem is each one have their own RSS feed. You can`t have a unique URL with all fired alerts in every SHC member.