Alerting

Running Alerts in Verbose or Fast mode

jamin358
Explorer

Hi everyone,

I have an alert that I want to run that will only give me the correct answer if run in verbose mode (contains look-ups and evals). Is there any way to change the search mode of the automated search? I dont mean the "display.page.search.mode = verbose" as this only works at the display level as the documentation states.

Thanks in advance

0 Karma
1 Solution

davpx
Communicator

Fast vs Smart vs Verbose is only for UI searches. The functionality you describe does not exist.

View solution in original post

davpx
Communicator

Fast vs Smart vs Verbose is only for UI searches. The functionality you describe does not exist.

king2jd
Path Finder

Can you post your query?

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...