Alerting

Bulk Update recipient email addresses for alerts.

cmahan
Path Finder

Is there a way to update the recipient email addresses on multiple alerts at once? Our domain has changed and I need all @xxxx.com emails changed to @yyyyyy.com without having to edit hundreds of individual alerts manually.

0 Karma
1 Solution

sanjay_shrestha
Contributor

Yes. It can be done modifying (globoal replacement) savedsearches.conf.

View solution in original post

vermabhi90
Explorer

looking for answer.

0 Karma

sanjay_shrestha
Contributor

Yes. It can be done modifying (globoal replacement) savedsearches.conf.

cmahan
Path Finder

Thanks! Exactly what I was looking for!

savedsearches.conf

0 Karma

chandrasekharko
Path Finder

Is it a global change or local change? A local change worked fine for me

0 Karma

vermabhi90
Explorer

Hi,

Please guide how you did it, I have to do same.

Thanks

0 Karma

rahulbhatia
Path Finder

Hi,

Can you please guide what change have you done in savedsearches.conf to get it done

Thanks in advance

0 Karma
Get Updates on the Splunk Community!

Alpha Launch: AI-Assisted Auto-Schematization for CIM

Streamlining Data Onboarding: Announcing the Alpha Release of AI-Assisted Auto-Schematization For many Splunk ...

Enterprise Security(ES) Essentials or Premier? Let's discuss Splunk ES Editions on ...

  Hi everyone, Last year at .conf25, we shared something exciting: Splunk Enterprise Security is evolving ...

[Puzzles] Solve, Learn, Repeat: Advent of Code - Day 5

Advent of CodeIn order to participate in these challenges, you will need to register with the Advent of Code ...