Alerting

Editing, modifing,removing an alerts

twieczorkowski
Explorer

Hi,

I've created an alert for a host.

It sends me an email. But I want to edit it or modifi it or delet it.

How can I do that? Where can I find this options for modifying an alerts?

BR,
Tom

Tags (1)

kristian_kolb
Ultra Champion

Manager -> Searches and Reports -> your_sourcetype:your search.

Click it and you can set/alter the alerting options. Make sure you are in the right App/user context (drop down menus at the top of the page) - otherwise you won't see your search.

/k

rogerdpack
Path Finder

for saved searches it's Searches and Reports -> choose_your_search -> More Info -> schedule [edit] -> next and you can finally change your "email to" settings, etc. yikes!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...