Alerting

Can saved search send alert and email notification with a splunk free license?

royimad
Builder

Is that possible from a free license to send email alert to users on my company based on saved search results ?

Thanks,
Roy

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

The free license does include scheduling... but it doesn't include alerting.

Here's a handy overview: http://www.splunk.com/view/free-vs-enterprise/SP-CAAAE8W

Another way to get info is to look at your license page in the manager, even enterprise and trial licensed instances list the free license in their stack. You'll see ScheduledSearch listed under free, but not Alerting.

View solution in original post

martin_mueller
SplunkTrust
SplunkTrust

The free license does include scheduling... but it doesn't include alerting.

Here's a handy overview: http://www.splunk.com/view/free-vs-enterprise/SP-CAAAE8W

Another way to get info is to look at your license page in the manager, even enterprise and trial licensed instances list the free license in their stack. You'll see ScheduledSearch listed under free, but not Alerting.

kristian_kolb
Ultra Champion

Oops - you may be right on that one, long time since I sat at a Free installation.

/k

0 Karma

kristian_kolb
Ultra Champion

Most likely not, according to the docs;

http://docs.splunk.com/Documentation/Splunk/latest/Admin/TypesofSplunklicenses#Free_license

Since you can't do scheduling in Free, you will not have access to alerting either.

/K

Get Updates on the Splunk Community!

Almost Too Eventful Assurance: Part 1

Modern IT and Network teams still struggle with too many alerts and isolating issues before they are notified. ...

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Today’s threat landscape is more complex than ever. Security operation centers (SOCs) are overwhelmed with ...

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...