Splunk Search

Fix Error while deleting an alert?

rahul2gupta
Path Finder

Hi  ,

I'm trying to disable an alert but while doing so I'm getting an error. can you please help in this.

rahul2gupta_0-1605583223703.png

 

Please note that I am not the owner of this alert. Is it possible that because of this I'm unable to disable it?

rahul2gupta_1-1605583359737.png

 

Could not find object id=WMS WK: Auto Wave Status Has Changed

rahul2gupta_2-1605583407670.png

Regards,

Rahul

 

Labels (1)
Tags (1)
0 Karma

rahul2gupta
Path Finder

Thank you @gcusello .

we have logged a case with the splunk support.

Regards,

Rahul

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @rahul2gupta,

you can disable an alert if you are the owner or an administrator.

Ciao.

Giuseppe

0 Karma

rahul2gupta
Path Finder

Hi @gcusello ,

I'm an admin but still unable to disable the alert.

Regards,

Rahul

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @rahul2gupta,

can you see this alert in alerts' list?

maybe it's a private alert not shared.

Ciao.

Giuseppe

0 Karma

iamsahil
Explorer

what if it is private?

0 Karma

rahul2gupta
Path Finder

Hi @gcusello ,

Yes, I can see this alert in the alert list.

Auto_alert.PNG

But while Disabling owner is also getting error same as me.

disable_error.PNG

When I click on the alert I get the following pop up message.

popup.PNG

Please help.

Regards,

Rahul

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @rahul2gupta,

probably the problem is that the alert is in system instead in an app.

So you could try to delete the alert in $SPLUNK_HOME/etc/system/local/savedsearches.conf 8and restart Splunk.

Otherwise, open a Case to Splunk Support.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...