This is the first time I am using an advanced conditional alertinsavedsearches.conf.
I'd like to get some feedback about current configurations I have around monitoring scheduled jobs.
If a...
I am creating an alert and configuring it insavedsearches.conf. The condition that i am giving is not firing the alert. It is firing whenever it finds the message, but my condition is "it should alert...
...eports, and alerts found'. This couldn't be the case of visibilty as the configuration isn't set in the conf file. These are the set specs in the conf file, attched below for reference. I have a...
Hi, I have a bunch of alertsin my savedsearches.conf. I would like to configure the alert action "Add to triggered alerts" (as is offered when you add the alert using the ui). I am doing this p...
I will like to "Export" all configured "Alerts" in a particular "App" with all configured settings including the actions when the alert is triggered. I have tried some "rest" and "searches" listed o...
we recently migrated to search head clustered configuration. I'm trying to find how the search head manages scheduled searches and alerts. Specifically, where is the savedsearches.conf file located a...
I've configured about 75 Alerts to email reports on a daily basis. Some of these reports will have no data. I don't want the Alert to send out the report if it is blank or empty.
I did configure...
...he entire result? I read that this can be configured thru limits.conf, savedsearches.conf, and alert_actions.conf but I could not find these files from the directory. Is there a step-by-step guide on h...