Alerting

How to create a report on configured alerts and their properties, such as who the alerts are sent to?

cmulkey2
Explorer

We have over 200 configured alerts and I would like to generate a report of the configured alerts with their properties, such as who the alerts are going to. I'm guessing there is a way to do that with a Splunk search, but not sure where to start. Is it that data in some internal index?

Tags (2)
0 Karma
1 Solution

somesoni2
Revered Legend

You would need a SPlunk REST search to get the information. This search should get you started.

| rest /services/saved/searches | search action.email=1 AND is_scheduled=1

More details here. http://docs.splunk.com/Documentation/Splunk/6.2.1/RESTREF/RESTsearch#saved.2Fsearches

View solution in original post

somesoni2
Revered Legend

You would need a SPlunk REST search to get the information. This search should get you started.

| rest /services/saved/searches | search action.email=1 AND is_scheduled=1

More details here. http://docs.splunk.com/Documentation/Splunk/6.2.1/RESTREF/RESTsearch#saved.2Fsearches

cmulkey2
Explorer

Tried | REST /services/saved/searches and it gave me only a few of the saved searches.

Did some more searching now that I know about REST and tried | REST /servicesNS/-/-/saved/searches which gave me a few more but still not all of the saved searches.

Finally, I found | REST splunk_server=local /servicesNS/-/-/saved/searches which gave me all of the saved searches and now I can filter down from there.

Thanks!

Get Updates on the Splunk Community!

CX Day is Coming!

Customer Experience (CX) Day is on October 7th!! We're so excited to bring back another day full of wonderful ...

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...