Hi, I mistakenly cloned an alert to the "Slack Alerts" app instead of the normal "Search & Reporting" app. This alert is functioning and sending Slack messages when triggered. But the alert...
Alerts vs Reports on Splunk "Searches, reports and alerts" page
I want to make this query to show the number of alerts and number of reports that match exactly how it shows on the "S...
The default page needs to be changed, after login to Splunk I should be directed to all the triggered alertpage. Eg: below are the triggered alert, After login I should be able to see the alert...
I was referring to this video https://www.youtube.com/watch?v=Dv_lp-aHnv8 but no events found at the event summary page. this is setup and Migration page. I...
...xception as ex:
sys.exit(1)
alert_actions.conf:
[ui]
is_visible = 1
label = Send a Page
[launcher]
author = sochsenbein
description = Send a page using the web api
version = 1.0
[i...
How can I use Splunk SDK/Rest API to get list of alerts and reports? For example, the page below shows total of 269 alerts. Would like to access these alerts with all its metadata (such as the u...
I'm not able to close notable alerts in the Incident Review but now the alert drill-down doesn’t seem to be functional. I'm not able to see, access or open any search related to the alerts after a...
Hi,
I've created a Splunk alert (see below photos) and have found that it's not properly sending e-mails to my account upon being triggered.
I opened the query in the search bar (from the alerts...
I am on an instance where I have no access to the license manager page, or where I never log in, or when I am not an admin (Splunk cloud or sandbox, in my case).
How can I set up a scheduled e...