Is it possible to export alerts from splunk cloud?

[Dayane_tr]

Hi everyone,

I would like to know if it is possible to export the alerts created in the splunk cloud instance.

I want to export the queries for each alert at once.

It's possible?

Regards 🙂

[seemanshu · Accepted solution]

Hi Dayane_tr,

In Splunk Cloud, you could submit a support ticket asking for the app's savedsearches.conf files.

You could learn more about the alert configurations in savedsearches.conf files, here Configure alerts in savedsearches.conf - Splunk Documentation.

If this reply helps you, an upvote would be appreciated.

[isoutamo]

Hi

You could try this one, even it has developed on OnPrem version. You must have REST api enabled on your SC stack to use this.

r. Ismo

[Dayane_tr]

Hi @isoutamo 

Sorry, I didn't understand your explanation.

D.

[isoutamo]

This presentation shows to you how to make backup from splunk environment over REST API. I suppose that it works also with splunk cloud stack, but I haven’t test it.

sorry, I forget to add link here https://www.google.fi/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwjA6NSLpaz4AhUiCRAIHUY_AO8QF...