Archive

Is there any search query to find all alerts and last triggered date and time for each of the alert ?

Explorer

Is there any search query to find all alerts and last triggered date and time for each of the alert ?

Tags (1)
0 Karma

Explorer

I found below query but want to know, all non-working alerts
index=_audit action="alert_fired" | dedup ss_name | table ss_name, _time

0 Karma