Alerting

Transferring Alerts from one instance to another

anujdalal
Engager

Hi,

Can we transfer alerts and/or dashboards that have been created in one instance to any other instance in splunk? Does anybody have an idea?

Tags (2)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

You can package your app containing alerts and dashboards using this:

| rest /services/apps/local/app_name/package

See http://docs.splunk.com/Documentation/Splunk/6.1.1/RESTAPI/RESTapps#apps.2Flocal.2F.7Bname.7D.2Fpacka... for reference.

Then you can use the packaged .spl file to install the app on other Splunk instances.

Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...