Hi,
I have an alert which periodically searches for errors in my application's logs. For reasons I won't bore anybody with, emailing from Splunk is currently disabled in my organisation. I similarly am unlikely to be granted access to avail of the 'Run a Script' action.
This only leaves 'List in Triggered Alerts'. I wouldn't mind this so much, if the list didn't include alerts that reaped zero results. I find that I have to repeatedly, tediously click on individual rows of the listing to find out whether there are any results inside.
Any way to only have the trigger list contain rows that reaped more than zero results? Any and all advice, greatly appreciated,
All the Best,
Dub
p.s. am I dreaming, or did the sign-up process for this community force me to select "Yes, I would like to receive newsletters etc"? If you can't opt out, why even make it a radio button? Never seen a registration form take that approach in my life...
... View more