https://community.splunk.com/t5/Splunk-Dev/Alert-Setup/m-p/538777#M9667 <P>So if two events occur every 30 minutes then you want two alerts triggered and if 11 events occur then you want a single alert, correct?&nbsp; If so then Splunk does not throttle alerts that way.&nbsp; Go to&nbsp;<A href="https://ideas.splunk.com" target="_blank">https://ideas.splunk.com</A>&nbsp;to suggest Splunk offer it.</P><P>If that is not what you seek then please describe the problem more.</P> Fri, 05 Feb 2021 14:35:35 GMT richgalloway 2021-02-05T14:35:35Z https://community.splunk.com/t5/Splunk-Dev/Alert-Setup/m-p/538753#M9666 <P>Alert should trigger each time if count of event is less 10 in last 30 min. But it will aggregate alerts if count is more than 10 in last 30 min</P> Fri, 05 Feb 2021 12:21:52 GMT https://community.splunk.com/t5/Splunk-Dev/Alert-Setup/m-p/538753#M9666 sayashagarwal27 2021-02-05T12:21:52Z https://community.splunk.com/t5/Splunk-Dev/Alert-Setup/m-p/538777#M9667 <P>So if two events occur every 30 minutes then you want two alerts triggered and if 11 events occur then you want a single alert, correct?&nbsp; If so then Splunk does not throttle alerts that way.&nbsp; Go to&nbsp;<A href="https://ideas.splunk.com" target="_blank">https://ideas.splunk.com</A>&nbsp;to suggest Splunk offer it.</P><P>If that is not what you seek then please describe the problem more.</P> Fri, 05 Feb 2021 14:35:35 GMT https://community.splunk.com/t5/Splunk-Dev/Alert-Setup/m-p/538777#M9667 richgalloway 2021-02-05T14:35:35Z