Enable Actions

The fields are as follows:

• List in Triggered Alerts: You can check this if you want to display your triggered alert in the Splunk Alert Manager, which lists details of triggered alerts for 24 hours or a specified duration
• Send Email: You can configure your alert to send an email to specified users when the alert gets triggered
• Run a Script: You can have Splunk run a script when your alert gets triggered