Delete Alert
delete_alertRemoves a Splunk alert by deleting its saved search. Requires confirmation to proceed, with optional app and owner context for precise targeting.
Instructions
Delete a Splunk alert. Alerts are saved searches, so this removes that saved search. Requires confirm=true. Use app and owner when the name exists in more than one namespace.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"name": "<name>"
},
"name": "delete_alert"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | App context for lookup | |
| name | Yes | Alert name (required) | |
| owner | No | Owner context for lookup | |
| confirm | No | Must be true to delete (default: false) |