Splunk Search

To set up alert using saved search and map command

varsh_6_8_6
Explorer

I have a saved search with 'n' number of results and I need to setup an alert mail for the results by creating an alert.

If I use the |map "savedsearch", the result is no events found. But there is event in the result of the saved search.

Please help me on this

Labels (4)
0 Karma
Get Updates on the Splunk Community!

Industry Solutions for Supply Chain and OT, Amazon Use Cases, Plus More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...