Dashboards & Visualizations

How to create a dashboard panel for triggered alerts?

mmercola
New Member

basically. I'm looking to extract the data from the triggered alerts drop down menu --under activity into a panel on a dashboard

Tags (1)
0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Basically, a triggered alert is a scheduled search job that ran an alert action. These are mentioned here:

index=_internal sourcetype=scheduler status=success alert_actions=*

Depending on the alert there might be more logs, e.g. about sending out an email. Go poke around the _internal index.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Basically, a triggered alert is a scheduled search job that ran an alert action. These are mentioned here:

index=_internal sourcetype=scheduler status=success alert_actions=*

Depending on the alert there might be more logs, e.g. about sending out an email. Go poke around the _internal index.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...