Can I search the "Alert" information by search command ?

[leo_wang]

I want to search the "Alert" information, which is the new feature of splunk 4.2 , and display alerts in the dashboard by my way.

Could I do this by search command? and where is the alert information stored?

Leo Wang

[andilee]

Alerts are stored at:

| rest /services/alerts/fired_alerts splunk_server=local

As far as searching and reporting on alerts - I wish I knew!! I am looking for the same information, I want to create a summary dashboard for my alerts. I'll post here if I find any answers 😞