Single-record Splunk alerts
concept australia Updated Sep 10, 2026 1 min read alerts.md
Within any alert, you can specify security events or security incidents to be created when the alert is fired.
Open or create your alert, and when editing actions, select the type of record you want, and fill in the alert dialog box.
21 lines · 948 B
--- title: Single-record Splunk alerts description: Within any alert, you can specify security events or security incidents to be created when the alert is fired. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/alerts.html release: australia product: Security Incident Response classification: security-incident-response topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [ServiceNow Security Operations add-on for Splunk overview, Security Incident Response integrations, Security Incident Response, Enterprise security case management applications, Security Operations] --- # Single-record Splunk alerts Within any alert, you can specify security events or security incidents to be created when the alert is fired. Open or create your alert, and when editing actions, select the type of record you want, and fill in the alert dialog box.
| title | Single-record Splunk alerts |
| description | Within any alert, you can specify security events or security incidents to be created when the alert is fired. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/alerts.html |
| release | australia |
| product | Security Incident Response |
| classification | security-incident-response |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | ServiceNow Security Operations add-on for Splunk overviewSecurity Incident Response integrationsSecurity Incident ResponseEnterprise security case management applicationsSecurity Operations |