Other Usage

How to disable multiple alerts?

SplunkySplunk
Explorer

Hello

I'm using Splunk Cloud and im looking for an option to disable multiple alert using rest api or script so it will be semi automatic 

Since I'm using the Cloud, I don't have access to savedsearches.conf file.

Any ideas ?

Thanks

Labels (1)
Tags (4)

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkySplunk,

there isn't any option to do this except savedsearches.conf modify, but this action isn't possible on Splunk Cloud.

Action on multiple objects (like alerts) is an issue that Splunk has from its beginning. now there's a request in Splunk Ideas but it isn't still taken in consideration because there are too few votes: https://ideas.splunk.com/ideas/PLECID-I-645

Ciao.

Giuseppe

 

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...