Splunk Dev

How to test splunk alerts created via python SDK

RS
Engager

Hi, I am creating alerts in my splunk instance using splunk python SDK. I am using example libraries/API as mentioned ---> splunklib.client and saved_searches.create

The alerts are created and also scheduled via cron successfully.

Is there a way  for me to allow users ability to test the newly created or existing alerts using python SDK interface? That is as soon as alerts are created they should get fired and user who created them can get a results of all triggered alerts.

Thanks

 

 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...