Alerting

Can't remove alerts properly

CASTAND
Engager

When I use the alert manager to remove an alert, the line related to the alert cannot be removed.
However, the alert action field is set to action=alert_deleted.

I've been encountering this problem since I upgrade my splunk version from 5.0.2 to 6.0. Can this be related ?

Tags (3)

shamer
Engager

I have the same issue:
http://answers.splunk.com/answers/128245/unable-to-delete-triggered-alerts.html

I haven't found a solution.

0 Karma

dkuk
Path Finder

I noticed this issue also on v6 but am yet to work out why it happens. I thought maybe it was due to a capability being required (in Splunk roles) but there doesn't seem to be anything relating to alerts in the available list. I'll post again if I work it out though not sure what it could be currently.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...