Splunk Search

How to generate a search that will display if an alert is triggered or not?

Path Finder

i want to know sample search to know whether the alert created is triggered or not ?
the alert will triggered as service now incident for the teams.
please help me with sample search.

0 Karma
1 Solution

SplunkTrust
SplunkTrust

Try this

index=_audit action=alert_fired

View solution in original post

0 Karma

SplunkTrust
SplunkTrust

Try this

index=_audit action=alert_fired

View solution in original post

0 Karma