Alerting

Why can't I save my search as an alert?

masotti
New Member

I have created an event and now want to save it as an alert. But only see report, dashboard and event type

0 Karma

sbbadri
Motivator

@masotti,

Please check this [capability::schedule_search] is added to your role.

0 Karma

lakromani
Builder

Do you have Free license, if so that is why.
You have a Full evaluation license to start with (valid for 30 days).
After that you need to buy a license of convert it to free version.

https://www.splunk.com/en_us/products/features-comparison-chart.html
Monitoring and Alerting is missing on Free version

mwdbhyat
Builder

Are you running in a Search head cluster? Are you sure your user account has permissions to create alerts?

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...