Reporting

Disable splunk alert via CLI

SS1
Path Finder

Hi,

We can disable the alert via command line with below command, but this doesnt work if the alert name has spaces in it.

curl -k -u admin https://<host>:<mgmt_port>/servicesNS/<user_context>/<app_context>/saved/searches/<search>/disable -X POST

I have a splunk alert Application Down Alert (Alert name has spaces in it)

How do i disable this alert via commandline.

 

Labels (5)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Assuming you've already tried putting quotation marks around the URL, try urlencoding it by replacing the spaces with %20

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

SS1
Path Finder

Thanks @richgalloway %20 worked fine for me.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Assuming you've already tried putting quotation marks around the URL, try urlencoding it by replacing the spaces with %20

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...