Alerting

how to rename a saved alert

hkumar26
New Member

Hi,
Is it possible to rename a saved alert via GUI. I have to rename atleast 20 of them and to create and save them again will be a tedious task,

Thanks in Advance

Tags (1)
0 Karma

DalJeanis
Legend

Don't create and save them, just clone them under the new names. You may have to click through some screens, but whenever I've done it, all the former values for when to run them, and so on, are already waiting for me in the new knowledge object.

There's a fundamental issue with trying to automate this (or even do it manually) that there may be other knowledge objects that depend on the old object names. Walk with caution.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...