Alerting

Transferring Alerts from one instance to another

anujdalal
Engager

Hi,

Can we transfer alerts and/or dashboards that have been created in one instance to any other instance in splunk? Does anybody have an idea?

Tags (2)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

You can package your app containing alerts and dashboards using this:

| rest /services/apps/local/app_name/package

See http://docs.splunk.com/Documentation/Splunk/6.1.1/RESTAPI/RESTapps#apps.2Flocal.2F.7Bname.7D.2Fpacka... for reference.

Then you can use the packaged .spl file to install the app on other Splunk instances.

Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...