Alerting

Filter out the alerts form the huge list to the DL its configured to.

rangineniarunku
Explorer

Is there any way I can filter out the list of alerts from the huge list for the one which are configured to particular DL?

I mean the one whose results are sent to particular DL. Appreciate any of your suggestions.

Tags (2)
0 Karma

hardikJsheth
Motivator

In case you have access to _internal index, you can use following search . You add filter as per your requirement.

index=_internal source=*scheduler* | stats count by savedsearch_name, status
0 Karma

lfedak_splunk
Splunk Employee
Splunk Employee

Hey @rangineniarunkumar, can you clarify what you mean by DL?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...