Book Image

Mastering Splunk

By : James D. Miller
Book Image

Mastering Splunk

By: James D. Miller

Overview of this book

Table of Contents (18 chapters)
Mastering Splunk
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Index

Editing alerts


There are several ways to edit alerts when using Splunk Web. For example, within an app, you can click on Alerts and then from the Alerts page, you can click on Edit.

From the drop-down menu, you can select Edit Actions, as shown in the following screenshot:

Editing the description

Clicking on Edit Description shows you the alert name (title) and allows you to edit the description of the alert:

Editing permissions

Clicking on Edit Permissions shows you the alert name (title), the owner, the app (context), and its display permissions:

You can set your alert permissions to the following:

  • Display for Owner: With this, only the current owner of the alert can access the alert and its results

  • Display for App: Using this, the alert is only accessible for the app it is currently in context of, for example, Search & Reporting

  • Display for All Apps: Using this, the alert is accessible within all Splunk apps

Editing the alert type and trigger

When you go to the Edit Alert page, Splunk does...