Setting a default action for alert in splunk

[kteng2024]

HI,

Is there anyway in splunk to set the "email" as default trigger action for an alert.

[somesoni2]

You can use [default] stanza in savedsearches.conf to assign an attribute to all saved searches. You can use attributes described in below link to setup your email alert.

http://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/Savedsearchesconf#Settings_for_email_action

Please note that this will get applied to all scheduled searches (unless overridden at search level).

[kteng2024]

Can i set the webhook as default trigger action as in the documentation i see only for email.