Other Usage

How to disable multiple alerts?

SplunkySplunk
Explorer

Hello

I'm using Splunk Cloud and im looking for an option to disable multiple alert using rest api or script so it will be semi automatic 

Since I'm using the Cloud, I don't have access to savedsearches.conf file.

Any ideas ?

Thanks

Labels (1)
Tags (4)

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkySplunk,

there isn't any option to do this except savedsearches.conf modify, but this action isn't possible on Splunk Cloud.

Action on multiple objects (like alerts) is an issue that Splunk has from its beginning. now there's a request in Splunk Ideas but it isn't still taken in consideration because there are too few votes: https://ideas.splunk.com/ideas/PLECID-I-645

Ciao.

Giuseppe

 

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...