List instances of triggered alerts
Select the List in Triggered Alerts action to display a list of instances when the alert triggers.
You can see records of recently triggered alerts from the Triggered Alerts page or from an Alert Details page. The Triggered Alerts page shows all instances of triggered alerts. The Alert Details page shows all instances of triggered alerts for a specific alert. Details of triggered alerts are available for 24 hours or a specified duration.
See "Review triggered alerts" in this manual.
Give tracked alerts a severity level
When listing a triggered alert, you can specify a Severity level. Severity levels are informational only. They let you group and highlight alerts in the Alert Manager according to the severity levels. You decide which level applies to the alert.
You can choose from the following severity levels. The default level is Medium.
Use a webhook alert action
Run a script alert action
This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14