Alerting

Alerts are working, but "No triggered alerts found." in triggered alerts activity screen

di2esysadmin
Path Finder

My alerts are working as I intended. I get the email. The email contains the link to the results. Going to that link serves up the following error:

Error in 'SearchOperator:loadjob': Cannot find job_id 'rt_scheduler_a2FybGEucnVzc2VsbA__search__RMD5033f04f8e659bd94_at_1393513652_3103.1'.

When I go to Activity->Triggered Alerts, I'm told "No triggered alerts found. "

Any ideas?

thx

Tags (2)

BARNEYRUDD
Explorer

I had this problem and managed to solve it by adding an "Add to triggered alert" trigger action

0 Karma

jadengoho
Builder

Same here , can somebody help me ?

0 Karma

leordimalanta
Explorer

Where did you create your alert? Is it in the same app you are trying to view the triggered alert?

If not go to the app where you created the alert and move it to the app where you are viewing the triggered alerts or go to the alert management page of the app where you created the alert check their if the triggered alerts were there. Also check the permissions and sharing of the alert. Hope it helps.

snargleplax
Explorer

Same app. As I said, I was following the link from the alert email. The upvotes on this must be from folks with a different issue.

0 Karma

nithin_shubhana
Explorer

Even I am also facing the same problem. Can anyone help us out please.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...