Alerting

I need alert if anyone click on export button on the search head

abhishekdubey00
Engager

I need a alert if any one click on export button option it should send alert through mail or triggered alert

Tags (1)
0 Karma
1 Solution

gaurav_maniar
Builder

Hi Abhishek,

index=_internal export| regex uri_path="results\/export$"

Create an alert using the above query and schedule it on real time or every minute cron job to get alert emails.

Let me know if you need help with scheduling alert as well.

Accept and upvote the answer if it helps.

happy splunking......!!!!!

View solution in original post

0 Karma

gaurav_maniar
Builder

Hi Abhishek,

index=_internal export| regex uri_path="results\/export$"

Create an alert using the above query and schedule it on real time or every minute cron job to get alert emails.

Let me know if you need help with scheduling alert as well.

Accept and upvote the answer if it helps.

happy splunking......!!!!!

0 Karma

nareshinsvu
Builder

Is your requirement to disable that "Edit"/"Export" option on the dashboard to the users?

if so, include this in your dashboard xml tag

<dashboard   hideEdit="true">
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...