> ## Documentation Index
> Fetch the complete documentation index at: https://splunk-training.ipoint-labs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Lab 9: Creating Alerts

> Hands-on lab · 45 min · Module 13

Alert on failed sign-ins to Splunk, then set the alert off on purpose and watch it fire.

[Launch Lab 9 in the IP Lab Portal](https://labs.intellectualpoint.com/labs/splunk-lab-9-creating-alerts)

## What you will do

1. Search for failed sign-ins to Splunk
2. Save the search as an alert
3. Set off the alert on purpose
4. Watch it fire in Triggered Alerts

## Before you start

Time
45 minutes
*On your own Splunk lab machine*

Role
admin
*Every lab signs you in as admin*

Module
Module 13: Scheduled Reports and Alerts
*SPK-101*

* Click **Launch Lab 9 in the IP Lab Portal** to open the lab page, then click **Launch** to start your machine.
* Starting a lab counts as an attempt. Tick off steps in the lab guide to track your progress.
* The course data is `access_30DAY.log`, `linux_s_30DAY.log`, `db_audit_30DAY.csv` and `products.csv`.
* Review the slides in [Module 13 Material](https://splunk-training.ipoint-labs.com/spk-101/module-13/material.md) before you start.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.