QuestionQ29Verified/Rule ConfigurationCopy linkReport a problemAsk AstroTutorSave questionWhat are custom alerts built upon?ACustom workflowsBCustom event based triggersCPredefined alert templatesDUser defined Splunk queriesShow AnswerAnswerExplanationCustom alerts are based on user-defined Splunk Processing Language (SPL) searches, typically saved searches. Splunk evaluates the search results against the alert condition to determine whether to trigger alert actions.Learn moreSplunk Java SDK SavedSearch referenceShow comments3Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion