Alerting

How to pull the details of triggered alert for last 7 days (when it was triggered, how many times and whom it was sent?

iqbalintouch
Path Finder

Hi,
I have same issue as mentioned in this question (https://answers.splunk.com/answers/329954/how-can-i-create-a-report-on-alert-information-wha.html?ut...) and looking for resolution. I followed the same query but it didn't work for me. Can you guys please help me out.

FYI: I am using enterprise splunk, version 6.3.2
I was able to get the list of all the enabled alert from here: | rest /servicesNS/-/-/saved/searches

But I need to get the details of how many times the alert was triggered in particular time duration, what was the alert and what time(when) ?

Thank you!

0 Karma

gabarrygowin
Path Finder

Hi!

Have you looked at Activity > Triggered alerts? That provides me the view/dashboard I'm needing.

Just sharing.

Cheers!

0 Karma

iqbalintouch
Path Finder

Hi gabarrygowin,

Nope, that is not helpful. I f I need to see the details of the older alerts which were triggered, this won't help.

Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.