Alerting

Running Alerts in Verbose or Fast mode

jamin358
Explorer

Hi everyone,

I have an alert that I want to run that will only give me the correct answer if run in verbose mode (contains look-ups and evals). Is there any way to change the search mode of the automated search? I dont mean the "display.page.search.mode = verbose" as this only works at the display level as the documentation states.

Thanks in advance

0 Karma
1 Solution

davpx
Communicator

Fast vs Smart vs Verbose is only for UI searches. The functionality you describe does not exist.

View solution in original post

davpx
Communicator

Fast vs Smart vs Verbose is only for UI searches. The functionality you describe does not exist.

View solution in original post

king2jd
Path Finder

Can you post your query?

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!