Other Usage

How to disable multiple alerts?

SplunkySplunk
Explorer

Hello

I'm using Splunk Cloud and im looking for an option to disable multiple alert using rest api or script so it will be semi automatic 

Since I'm using the Cloud, I don't have access to savedsearches.conf file.

Any ideas ?

Thanks

Labels (1)
Tags (4)

gcusello
SplunkTrust
SplunkTrust

Hi @SplunkySplunk,

there isn't any option to do this except savedsearches.conf modify, but this action isn't possible on Splunk Cloud.

Action on multiple objects (like alerts) is an issue that Splunk has from its beginning. now there's a request in Splunk Ideas but it isn't still taken in consideration because there are too few votes: https://ideas.splunk.com/ideas/PLECID-I-645

Ciao.

Giuseppe

 

0 Karma
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...