How to find the most use cases trigger alerts in Splunk?

[engmohdissam]

Greetings!

I need to know how I can find the most use cases trigger alerts in Splunk.

is there any specific search query that can help? I need the use case name and the count of the alerts 

[richgalloway]

See if this query helps.

| rest /servicesNS/-/-/saved/searches splunk_server=local 
```Ignore reports and disabled searches```
| search alert_type!="always" disabled=0 
| where triggered_alert_count > 0 
| table title eai:acl.owner eai:acl.app triggered_alert_count