Re: using python SDK how to retrive the action ite...

masmi99 · ‎10-15-2021

hi Team, is it possible to retrive the action items present on an alert based on the alert name using python SDK

Example i know i have an alert by the name which skipped

using that name i can retrive the query that is used. but wondering if i can retrive the action on the alert (like the webhook or the emails to which it is sent, and the cron schedule)

richgalloway · ‎10-15-2021

Use the SDK to send this REST command

| rest /servicesNS/-/-/saved/searches/CPU%20Utilization splunk_server=local

The fields you want to look for in the response are cron_schedule and action.*

---
If this reply helps you, Karma would be appreciated.

using python SDK how to retrive the action items on a splunk

Python

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Recap | Agentic Operations Start with Context: Build the Right Data Foundation

Recap | Assisted, Augmented or Agentic? Choose Your Splunk Starting Point

Session 2 | Beyond the Thread: Operationalizing AI with Confidence

Join the Conversation