Alerting

Is it possible to make a Historical Alert Dashboard or Report of AWS rules?

Hegemon1984
Engager

Hello,

I have 16 AWS rules and would like to make a dashboard/report of the frequency they fire week/month/year. Is this possible in an efficient manner?

Thank You

Labels (1)
0 Karma
1 Solution

Hegemon1984
Engager

Figured out the answer to my own question.

 

index=notable search_name= *AWS* |stats count by search_name |sort - count

View solution in original post

0 Karma

Hegemon1984
Engager

Figured out the answer to my own question.

 

index=notable search_name= *AWS* |stats count by search_name |sort - count
0 Karma
Get Updates on the Splunk Community!

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

Register Join this Tech Talk to learn how unique features like Service Centric Views, Tag Spotlight, and ...

Thank You for Celebrating CX Day with Splunk!

Yesterday the entire team at Splunk + Cisco joined the global celebration of CX Day - celebrating our ...