Alerting

How to pull the details of triggered alert for last 7 days (when it was triggered, how many times and whom it was sent?

iqbalintouch
Path Finder

Hi,
I have same issue as mentioned in this question (https://answers.splunk.com/answers/329954/how-can-i-create-a-report-on-alert-information-wha.html?ut...) and looking for resolution. I followed the same query but it didn't work for me. Can you guys please help me out.

FYI: I am using enterprise splunk, version 6.3.2
I was able to get the list of all the enabled alert from here: | rest /servicesNS/-/-/saved/searches

But I need to get the details of how many times the alert was triggered in particular time duration, what was the alert and what time(when) ?

Thank you!

0 Karma

gabarrygowin
Path Finder

Hi!

Have you looked at Activity > Triggered alerts? That provides me the view/dashboard I'm needing.

Just sharing.

Cheers!

0 Karma

iqbalintouch
Path Finder

Hi gabarrygowin,

Nope, that is not helpful. I f I need to see the details of the older alerts which were triggered, this won't help.

Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...