Getting started with alerts
Use alerts to monitor for and respond to specific events. Alerts use a saved search to look for events in real time or on a schedule. Alerts trigger when search results meet specific conditions. You can use alert actions to respond when alerts trigger.
The alerting workflow
This documentation applies to the following versions of Splunk Cloud™: 7.0.13, 8.2.2105, 7.2.10, 7.2.9, 8.0.2006, 8.0.2007, 8.1.2008, 8.1.2009, 8.1.2011, 8.1.2012 (latest FedRAMP release), 8.1.2101, 8.1.2103, 8.2.2104