Alerting

Unable to Remove Slack Alert From the Slack Alerts Configuration Page

Simon1
Engager

Hi,

I mistakenly cloned an alert to the "Slack Alerts" app instead of the normal "Search & Reporting" app. 

This alert is functioning and sending Slack messages when triggered. But the alert is in the wrong app.

But worse is that the alert now appears in the "All Configurations" page.

I am able to disable the alert but not able to remove it and I really need to remove it from the "All Configurations" page. I'm also not able to edit the alert in any way.

Is it possible to remove the alert from the "All Configurations" page?

RemoveSplunkSlackAlert.png

 

Thank you.

Labels (2)
0 Karma
1 Solution

SanjayReddy
SplunkTrust
SplunkTrust

Hi @Simon1 

I feel there is not direct way to change the app context in UI also you are using splunk cloud.

otherway is go to searches reports and alerts from settings 

SanjayReddy_0-1701139898383.png

from their click on edit alet and clone 

SanjayReddy_1-1701139971532.png

then you can change the app context  and , once clone the alert delete the alert with app in slack context

SanjayReddy_2-1701139998753.png

 

View solution in original post

0 Karma

Simon1
Engager

Hi @SanjayReddy ,

That worked!

I was able to go to Searches Reports & Alerts from settings and delete the alert from there.

Thank you so much for your help!

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @Simon1 

I feel there is not direct way to change the app context in UI also you are using splunk cloud.

otherway is go to searches reports and alerts from settings 

SanjayReddy_0-1701139898383.png

from their click on edit alet and clone 

SanjayReddy_1-1701139971532.png

then you can change the app context  and , once clone the alert delete the alert with app in slack context

SanjayReddy_2-1701139998753.png

 

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...