All Apps and Add-ons

Alert Manager -- Does anyone have this app working?

jamesklassen
Path Finder

So this app looks amazing and exactly what my team needs, but I can NOT get this thing working. Has anyone out there in the community managed to run this thing successfully? It's just been one problem after another and I don't think I'm getting anywhere. 

Right now I think I've narrowed the issue to a line in the "alert_manager_scheduler.log" in splunk/var/log, which states: ...message="No saved searches found in system, skipping..."(alert_manager_scheduler.py:86)

Additionally, there is no data in my alerts index...which is what I had set as the index in Global Settings. 

Note that I'm on Windows, and in an offline (no internet) environment. 

The app in question is here: Alert Manager | Splunkbase

Documentation here: Introduction - Alert Manager

Labels (1)
0 Karma
1 Solution

jamesklassen
Path Finder

I completely missed a step. I've got it working now.

For anyone else who is in a similar situation in the future, you need to add the 'Alert Manager' Triger Action to your existing alerts before they'll feed into Alert Manager.  I had unfortunately just assumed that all my existing alerts would magically appear in the 'Alert Manager' dashboard. 

View solution in original post

0 Karma

jamesklassen
Path Finder

I completely missed a step. I've got it working now.

For anyone else who is in a similar situation in the future, you need to add the 'Alert Manager' Triger Action to your existing alerts before they'll feed into Alert Manager.  I had unfortunately just assumed that all my existing alerts would magically appear in the 'Alert Manager' dashboard. 

0 Karma
Get Updates on the Splunk Community!

Index This | How many sides does a circle have?

  March 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

New This Month - Splunk Observability updates and improvements for faster ...

What’s New? This month, we’re delivering several enhancements across Splunk Observability Cloud for faster and ...

What's New in Splunk Cloud Platform 9.3.2411?

Hey Splunky People! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2411. This release ...