All Apps and Add-ons

Alert Manager -- Does anyone have this app working?

jamesklassen
Path Finder

So this app looks amazing and exactly what my team needs, but I can NOT get this thing working. Has anyone out there in the community managed to run this thing successfully? It's just been one problem after another and I don't think I'm getting anywhere. 

Right now I think I've narrowed the issue to a line in the "alert_manager_scheduler.log" in splunk/var/log, which states: ...message="No saved searches found in system, skipping..."(alert_manager_scheduler.py:86)

Additionally, there is no data in my alerts index...which is what I had set as the index in Global Settings. 

Note that I'm on Windows, and in an offline (no internet) environment. 

The app in question is here: Alert Manager | Splunkbase

Documentation here: Introduction - Alert Manager

Labels (1)
0 Karma
1 Solution

jamesklassen
Path Finder

I completely missed a step. I've got it working now.

For anyone else who is in a similar situation in the future, you need to add the 'Alert Manager' Triger Action to your existing alerts before they'll feed into Alert Manager.  I had unfortunately just assumed that all my existing alerts would magically appear in the 'Alert Manager' dashboard. 

View solution in original post

0 Karma

jamesklassen
Path Finder

I completely missed a step. I've got it working now.

For anyone else who is in a similar situation in the future, you need to add the 'Alert Manager' Triger Action to your existing alerts before they'll feed into Alert Manager.  I had unfortunately just assumed that all my existing alerts would magically appear in the 'Alert Manager' dashboard. 

0 Karma
Get Updates on the Splunk Community!

Fall Into Learning with New Splunk Education Courses

Every month, Splunk Education releases new courses to help you branch out, strengthen your data science roots, ...

Super Optimize your Splunk Stats Searches: Unlocking the Power of tstats, TERM, and ...

By Martin Hettervik, Senior Consultant and Team Leader at Accelerate at Iver, Splunk MVPThe stats command is ...

How Splunk Observability Cloud Prevented a Major Payment Crisis in Minutes

Your bank's payment processing system is humming along during a busy afternoon, handling millions in hourly ...