Why can't I save my search as an alert?

New Member

I have created an event and now want to save it as an alert. But only see report, dashboard and event type

0 Karma



Please check this [capability::schedule_search] is added to your role.

0 Karma


Do you have Free license, if so that is why.
You have a Full evaluation license to start with (valid for 30 days).
After that you need to buy a license of convert it to free version.
Monitoring and Alerting is missing on Free version


Are you running in a Search head cluster? Are you sure your user account has permissions to create alerts?

0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...