Dear Colleagues
Help write a query to get data about all reports and alerts
I need to get information e.g.
1. Execution time of each report and alert
2. How much does a completed report and alerts
and stuff like that
tried to find information in the monitoring console
But did not find information about each report and alert
I will be grateful !
Settings -> Monitoring Console -> Search -> Activity -> Search Activity: Deployment
@woodcock
Hi!
I see their information only about the searches themselves
I need analytics about reports and alerts
thanks for your reply!)
Hi @gitingua ,
using the following search using REST API
| rest /servicesNS/-/MYAPP/saved/searches
you list all the savedsearches you have in your Splunk Environment.
Then you can filter them for status (enabled or disables) if they are alerts or reports, etc... and then you can define which information display (e.g. title, search, status, etc...=
Ciao.
Giuseppe
Hi @gcusello
I looked at your example
But that's not what I was looking for
I need report and alert analytics.
Eg:
average run time and stuff like that