I have an alert that runs every hour, triggered when the number of results is greater than 0, for reach result.  I have the throttle option checked, and "suppress results containing field value" set to "myData.message" (this is an error message I want alerts for). The action is a Slack message. The result of this alert is one Slack message for each unique error message found in the past hour. I want to know if there's a way to get the count of the specific/unique error message that it's firing for. $job.resultCount$ gives me the count of all error messages found, so that doesn't work for my use case. ... View more

I noticed that Splunk MINT is now listed under "Legacy products": https://docs.splunk.com/Documentation/Legacy Does this mean this product is being deprecated or will soon be no longer supported? ... View more