Is there a way by which we can put a group of splunk alerts to maintenance?

[bishtk]

Dear All,

Need to know if there's any way by which we can put a group of alerts already created to maintenance for some period?

Let say we have 5 Splunk Apps and we need to put under maintenance 3 Apps configured alerts.

-Thanks in advance

[skoelpin]

Best thing I can think of is to use the rest api to identify alerts that you want to put in MM than just disable them

[bishtk]

Hi @skoelpin Could you please elaborate it with an example