using python SDK how to retrive the action items o...

masmi99 · ‎10-15-2021

hi Team, is it possible to retrive the action items present on an alert based on the alert name using python SDK

Example i know i have an alert by the name which skipped

using that name i can retrive the query that is used. but wondering if i can retrive the action on the alert (like the webhook or the emails to which it is sent, and the cron schedule)

richgalloway · ‎10-15-2021

Use the SDK to send this REST command

| rest /servicesNS/-/-/saved/searches/CPU%20Utilization splunk_server=local

The fields you want to look for in the response are cron_schedule and action.*

---
If this reply helps you, Karma would be appreciated.

using python SDK how to retrive the action items on a splunk

Python

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Join the Conversation