How to generate a search that will display if an alert is triggered or not?

[sravankaripe]

i want to know sample search to know whether the alert created is triggered or not ?
the alert will triggered as service now incident for the teams.
please help me with sample search.

[somesoni2 · Accepted solution]

Try this

index=_audit action=alert_fired