Delete Alert
delete_alertRemoves a Splunk alert by deleting its saved search. Requires confirmation to proceed, with optional app and owner context for precise targeting.
Instructions
Delete a Splunk alert. Alerts are saved searches, so this removes that saved search. Requires confirm=true. Use app and owner when the name exists in more than one namespace.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | App context for lookup | |
| name | Yes | Alert name (required) | |
| owner | No | Owner context for lookup | |
| confirm | No | Must be true to delete (default: false) |