How to pull the details of triggered alert for last 7 days (when it was triggered, how many times and whom it was sent?

Path Finder

I have same issue as mentioned in this question ( and looking for resolution. I followed the same query but it didn't work for me. Can you guys please help me out.

FYI: I am using enterprise splunk, version 6.3.2
I was able to get the list of all the enabled alert from here: | rest /servicesNS/-/-/saved/searches

But I need to get the details of how many times the alert was triggered in particular time duration, what was the alert and what time(when) ?

Thank you!

0 Karma

Path Finder


Have you looked at Activity > Triggered alerts? That provides me the view/dashboard I'm needing.

Just sharing.


0 Karma

Path Finder

Hi gabarrygowin,

Nope, that is not helpful. I f I need to see the details of the older alerts which were triggered, this won't help.

State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!