Hi People,
I created a sample app which works with uploaded data in splunk. The data has almost 1700 rows. This data is fixed. I created an alert which is based on triggered condition. The condition is number of results. I added condition in alert is number of results >0 in last one minute. when I do simple search like source="sourcename". Results are returning my 1700 rows.
But alert is not triggering. I don't see anything in alert activity( Triggered alert).
What am I missing here?
Thanks in advance
Bheem
↧