Should the alert Permissions-Private or Shared in App be shared with other users?
For our example, I've elected to trigger an email to mary (marys@splunker.com), with a link to both the alert and the alert results within the email so that she can review her errors. In addition (as shown in the next screenshot), I have decided to send an email Once (for all events/errors within the time range, not for each one) and leave the alert as Private:
After hitting Save, our alert is ready to go:
Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.
Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.
Start your free trial Become a member now