Alerting

Splunk Alerts

jegann69
New Member

Recently i moved alerts/reports/dashboards from app to another. The alert was created in launcher app and moved to an app called cap , The problem is when the results are sent to my email id and when i hover the mouse over "view results in splunk" it shows the url of the cap app but when i click on it, it takes to the url of the launcher app and shows the results. Can someone please help

0 Karma

manjunathmeti
Champion

Check request.ui_dispatch_app attribute for the alert in savedsearches.conf OR in advanced settings for alert on UI . Since you created alert in launcher app, it is set to launcher app.

0 Karma

jegann69
New Member

Even after changing request.ui_dispatch_app = cap_app, it still takes me back to launcher url

0 Karma
Get Updates on the Splunk Community!

See Splunk Platform & Observability Innovations at Cisco Live EMEA

Hi Splunkers, Learn about what’s next for Splunk Platform at Cisco Live EMEA.  Data silos are a big challenge ...

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...