Alerting

How to pull the details of triggered alert for last 7 days (when it was triggered, how many times and whom it was sent?

iqbalintouch
Path Finder

Hi,
I have same issue as mentioned in this question (https://answers.splunk.com/answers/329954/how-can-i-create-a-report-on-alert-information-wha.html?ut...) and looking for resolution. I followed the same query but it didn't work for me. Can you guys please help me out.

FYI: I am using enterprise splunk, version 6.3.2
I was able to get the list of all the enabled alert from here: | rest /servicesNS/-/-/saved/searches

But I need to get the details of how many times the alert was triggered in particular time duration, what was the alert and what time(when) ?

Thank you!

0 Karma

gabarrygowin
Path Finder

Hi!

Have you looked at Activity > Triggered alerts? That provides me the view/dashboard I'm needing.

Just sharing.

Cheers!

0 Karma

iqbalintouch
Path Finder

Hi gabarrygowin,

Nope, that is not helpful. I f I need to see the details of the older alerts which were triggered, this won't help.

Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...