Alerting

How to pull the details of triggered alert for last 7 days (when it was triggered, how many times and whom it was sent?

iqbalintouch
Path Finder

Hi,
I have same issue as mentioned in this question (https://answers.splunk.com/answers/329954/how-can-i-create-a-report-on-alert-information-wha.html?ut...) and looking for resolution. I followed the same query but it didn't work for me. Can you guys please help me out.

FYI: I am using enterprise splunk, version 6.3.2
I was able to get the list of all the enabled alert from here: | rest /servicesNS/-/-/saved/searches

But I need to get the details of how many times the alert was triggered in particular time duration, what was the alert and what time(when) ?

Thank you!

0 Karma

gabarrygowin
Path Finder

Hi!

Have you looked at Activity > Triggered alerts? That provides me the view/dashboard I'm needing.

Just sharing.

Cheers!

0 Karma

iqbalintouch
Path Finder

Hi gabarrygowin,

Nope, that is not helpful. I f I need to see the details of the older alerts which were triggered, this won't help.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...