We have a large number of saved alerts (250+). I have been asked to review the email distribution list for every one of these to identify addresses for people who no longer work for the company and remove them. There is some assumption that Splunk should make this an easy (click a couple buttons and view a consolidated list for all alerts). I have told them this is not the case (as far as I can tell). Is there a way through the web GUI or otherwise to dump this information for each alert?
... View more