Alerting

Why can't I save my search as an alert?

masotti
New Member

I have created an event and now want to save it as an alert. But only see report, dashboard and event type

0 Karma

sbbadri
Motivator

@masotti,

Please check this [capability::schedule_search] is added to your role.

0 Karma

lakromani
Builder

Do you have Free license, if so that is why.
You have a Full evaluation license to start with (valid for 30 days).
After that you need to buy a license of convert it to free version.

https://www.splunk.com/en_us/products/features-comparison-chart.html
Monitoring and Alerting is missing on Free version

mwdbhyat
Builder

Are you running in a Search head cluster? Are you sure your user account has permissions to create alerts?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...