Search icon
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Implementing Splunk (Update)

You're reading from  Implementing Splunk (Update)

Product type Book
Published in Jul 2015
Publisher
ISBN-13 9781784391607
Pages 506 pages
Edition 1st Edition
Languages

Table of Contents (20) Chapters

Implementing Splunk Second Edition
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
The Splunk Interface Understanding Search Tables, Charts, and Fields Data Models and Pivots Simple XML Dashboards Advanced Search Examples Extending Search Working with Apps Building Advanced Dashboards Summary Indexes and CSV Files Configuring Splunk Advanced Deployments Extending Splunk Index

Creating alerts from searches


Let's continue with our example. We want to take our original search query, schedule it, and then set a triggered response.

Any saved search can also be run on a schedule. One use for scheduled searches is firing alerts. Let's get started with our example. Go to the Reports page (shown in the previous screenshot) and click on Open in Search for our report (errors affecting mary). This opens our saved report not as a report but as a search query (it also runs the search). From there, we can click on Save As and choose Alert:

Using the Save As Alert window (shown in the next screenshot), we can fill in the appropriate details for our alert:

  • Title: I kept the original search title (errors affecting mary) but added the word alert

  • Description: I kept this the same, but in reality, we'd want to add more of a description

  • Alert Type: I selected Scheduled, since I want this alert search to be run every day

  • Time Range: I selected the preset Run every day

  • Schedule At: I selected...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $15.99/month. Cancel anytime}