I am running Splunk 6.1.3 and while in Search, in the New Search area, I have entered "EventCode=1001". A few entries arrive and I click on the Save As button and my only options are: Report
Dashboard Panel
----------------------------
Event Type
(I would include a picture but I don't have enough "karma points".)
From what I researched, there should be an Alert option below Dashboard Panel included in this area but there is no option given.
Please let me know how to create Alerts since this option isn't available within the "usual" method or a way to make the Alert option appear in the Save As drop down menu.
... View more