All Apps and Add-ons

Alert Manager: Why is the Incident Posture dashboard not displaying alerts?

vanderaj1
Path Finder

Hello,

I've installed the Alert Manager App on my search head and the TA on my search head and indexers. Fired alerts were coming into the Incident Posture dashboard just fine. I could see the alerts and update/assign them. Then it just seemed to stop working. I can't see any alerts in the lower portion of the Incident Posture dashboard now. I can only see the upper portion of the Dashboard (where trending information and "recent incident" drop-downs are displayed)

The alerts are there (i.e. I can see them when I go to Reports->Incident Export. However, there seems to be an issue with seeing them via the Incident Posture dashboard itself. When I edit the panels, the "Alert Results" portion of the dashboard reads "Search is waiting for input..."

Any guidance would be appreciated!

Thank you....

0 Karma
1 Solution

vanderaj1
Path Finder

To answer my own question, something must have been malfunctioning in the TA. I ended up re-installing and I'm back up and running again.

View solution in original post

0 Karma

dgillette3
Explorer

I had the EXACT same problem. The app worked fine for about a month and then one day incidents just stopped appearing in the Incident Posture dashboard. Bizarre. I too resolved the issue by reinstalling the add-on. I also reinstalled the app.

0 Karma

vanderaj1
Path Finder

To answer my own question, something must have been malfunctioning in the TA. I ended up re-installing and I'm back up and running again.

0 Karma
Get Updates on the Splunk Community!

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Splunk Education Goes to Washington | Splunk GovSummit 2024

If you’re in the Washington, D.C. area, this is your opportunity to take your career and Splunk skills to the ...