All Apps and Add-ons

Alert Manager -- Does anyone have this app working?

jamesklassen
Path Finder

So this app looks amazing and exactly what my team needs, but I can NOT get this thing working. Has anyone out there in the community managed to run this thing successfully? It's just been one problem after another and I don't think I'm getting anywhere. 

Right now I think I've narrowed the issue to a line in the "alert_manager_scheduler.log" in splunk/var/log, which states: ...message="No saved searches found in system, skipping..."(alert_manager_scheduler.py:86)

Additionally, there is no data in my alerts index...which is what I had set as the index in Global Settings. 

Note that I'm on Windows, and in an offline (no internet) environment. 

The app in question is here: Alert Manager | Splunkbase

Documentation here: Introduction - Alert Manager

Labels (1)
0 Karma
1 Solution

jamesklassen
Path Finder

I completely missed a step. I've got it working now.

For anyone else who is in a similar situation in the future, you need to add the 'Alert Manager' Triger Action to your existing alerts before they'll feed into Alert Manager.  I had unfortunately just assumed that all my existing alerts would magically appear in the 'Alert Manager' dashboard. 

View solution in original post

0 Karma

jamesklassen
Path Finder

I completely missed a step. I've got it working now.

For anyone else who is in a similar situation in the future, you need to add the 'Alert Manager' Triger Action to your existing alerts before they'll feed into Alert Manager.  I had unfortunately just assumed that all my existing alerts would magically appear in the 'Alert Manager' dashboard. 

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...