Reporting

Disable splunk alert via CLI

SS1
Path Finder

Hi,

We can disable the alert via command line with below command, but this doesnt work if the alert name has spaces in it.

curl -k -u admin https://<host>:<mgmt_port>/servicesNS/<user_context>/<app_context>/saved/searches/<search>/disable -X POST

I have a splunk alert Application Down Alert (Alert name has spaces in it)

How do i disable this alert via commandline.

 

Labels (5)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Assuming you've already tried putting quotation marks around the URL, try urlencoding it by replacing the spaces with %20

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

SS1
Path Finder

Thanks @richgalloway %20 worked fine for me.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Assuming you've already tried putting quotation marks around the URL, try urlencoding it by replacing the spaces with %20

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...

New Splunk Innovations Enhance Performance and Accelerate Troubleshooting

Splunk is excited to announce new releases that empower ITOps and engineering teams to stay ahead in ever ...