Hi,
I'm trying to fetch triggered alerts data using rest command,
|rest timeout=600 splunk_server=local /servicesNS/-/-/alerts/fired_alerts/MyAlert
but i only get a field triggered_alert_count=n,
but i don't get the n events that triggered that alert, how can i get those events ?