How do you create a query to get a report of an alert configured in a search head?

[logloganathan]

i have an alert tab where i configured 10 alerts. I want to get the report of the alert present in a Splunk in CSV.

Could anyone please help?

[kamlesh_vaghela · Accepted solution]

@logloganathan

You can get alerts details using below search.

| rest /servicesNS/-/-/saved/searches splunk_server=local

You have to add filters as per your requirements.

Thanks

[logloganathan]

its very helpful!!