Splunk® Enterprise

Alerting Manual

Acrobat logo Download manual as PDF

Splunk Enterprise version 6.x is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Acrobat logo Download topic as PDF

Update and expand alert functionality

You can view alert information and configure alerts from the following places in Splunk Web.

Location Description
Alerts page Provides a listing of all all alerts created within an app. It contains options for editing an alert. Click an alert entry to view the detail page for the alert. See Alerts page.
Alert detail page Provides links to update an alert. When applicable, lists triggered alerts. See Alert Details page.
Alert Actions Manager See Alert Actions Manager.
Settings Alerts are a type of saved search. You can view saved searches, reports, and alerts from the Searches, reports, and alerts view in Settings. From this view, you can do the following:

  • Create a new alert.
  • Create an alert based on an existing search.
  • Modify an alert.
  • Enable or disable an alert.
  • Delete alerts for which you have the appropriate permissions.

See Update alerts from Settings

Last modified on 24 November, 2015
Alert action permissions
Specify alert fields

This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters