Splunk Enterprise

Splunk ES add an "assign to me" link as a field or button in alarms

nathanluke1986
Engager

Hi,

I am trying to add an "assign to me" link as a field or button for each alarm that would automatically assign alarms to the user when clicked. 

Example:

Currently need to select alarm, click edit and click "assign to me" link and submit

nathanluke1986_0-1686918243580.png

 

I want to reuse that link and add it as an alarm field or button on the Incident Review page so analysts simply have to click to assign.

This would drastically improve SLA times for us.

 

Thanks

0 Karma

jnhth
Explorer

Hi,

Did you found a solution? I'm looking at same feature.

0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@nathanluke1986 - Try the bulk edit option (select multiple and edit at the same time) on the Incident Review page of ES.

 

I hope this helps!!! Kindly upvote if it does!!!

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...