When I use the alert manager to remove an alert, the line related to the alert cannot be removed.
However, the alert action field is set to action=alert_deleted.
I've been encountering this problem since I upgrade my splunk version from 5.0.2 to 6.0. Can this be related ?
... View more