Alerting

Why can't I save my search as an alert?

masotti
New Member

I have created an event and now want to save it as an alert. But only see report, dashboard and event type

0 Karma

sbbadri
Motivator

@masotti,

Please check this [capability::schedule_search] is added to your role.

0 Karma

lakromani
Builder

Do you have Free license, if so that is why.
You have a Full evaluation license to start with (valid for 30 days).
After that you need to buy a license of convert it to free version.

https://www.splunk.com/en_us/products/features-comparison-chart.html
Monitoring and Alerting is missing on Free version

mwdbhyat
Builder

Are you running in a Search head cluster? Are you sure your user account has permissions to create alerts?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...