Splunk Search

Capabilities

Ash1
Communicator

We want to provide few capabilities to the team

Presently team has a capability to create email alert.

What capabilities need to be given to create auto cut alerts.

0 Karma

yuanliu
SplunkTrust
SplunkTrust

Are you talking about permissions?  Security might be a better forum. (There used to be a broader Admin forum but it's gone in the new board.)

What is an "auto cut alert", anyway?

0 Karma

Ash1
Communicator

It’s not about security. We have option to create alerts in  splunk. So we have action items as alert trigger, email alert, auto cut etc

auto cut means creating service now incidents from Splunk to service now 

so for email alert we have schedule_search capability likewise what capability we need to give to create auto to create service now incident from Splunk to service now.

 

 

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...