Related Answers
Splunk Enterprise version 6.x is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk.
Click here for the latest version.
Download topic as PDF
Set up alert actions
Alert actions help you respond to triggered alerts. You can enable one or more alert actions. Learn about the available options.
| To learn about | See |
|---|---|
| Sending email notifications when alerts trigger | Email notification action |
| Displaying a message in a chat room or updating another web resource | Use a webhook alert action |
| Logging and indexing searchable alert events | Log events |
| Adding an alert to a list of recently triggered alerts for monitoring | Monitor triggered alerts |
Deprecated alert action:
The script alert action is deprecated. As an alternative, see About custom alert actions for information on building customized alert actions that can include scripts.
Additional resources
To review alert triggering, see Configuring alert trigger conditions.
Last modified on 16 October, 2017
|
PREVIOUS Throttle alerts |
NEXT Email notification action |
This documentation applies to the following versions of Splunk® Enterprise: 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11, 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10
Feedback submitted, thanks!