Alerting

How can I create a report on alert information? (what alerts were triggered, when, how many times, and to whom it was sent)

athorat
Communicator

We Want to create a report based on the internal index,
Today we have lot of alerts created, and it is becoming a challenge to manage the alerts. This report will tell us what alerts were triggered, when it was triggered, how many times, and to whom it was sent.

Can this be achieved?

Tags (2)
0 Karma

MuS
Legend

Hi athorat,

take a look at this answer https://answers.splunk.com/answers/305328/how-to-search-the-names-of-triggered-alerts-their.html which is kind of similar - just misses the to whom it was sent....but you should be able to get it as well from the first search.

Hope this helps ...

cheers, MuS

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...