https://community.splunk.com/t5/Splunk-Dev/sending-email/m-p/539884#M9690 <P>I have a scenario where I need to send email to owner of the account when it is locked. I want to run the query for every 5mins checking for last1 hr data, and the email should be sent only once in a day even the account is locked multiple times in a day. And the email configuration is done in the query itself, passing owner field values to email address.<BR />As we cannot use throttling in this case(as mail is being sent from search query), could anyone please suggest a solution?</P> Mon, 15 Feb 2021 09:45:37 GMT yashaswinig2210 2021-02-15T09:45:37Z https://community.splunk.com/t5/Splunk-Dev/sending-email/m-p/539884#M9690 <P>I have a scenario where I need to send email to owner of the account when it is locked. I want to run the query for every 5mins checking for last1 hr data, and the email should be sent only once in a day even the account is locked multiple times in a day. And the email configuration is done in the query itself, passing owner field values to email address.<BR />As we cannot use throttling in this case(as mail is being sent from search query), could anyone please suggest a solution?</P> Mon, 15 Feb 2021 09:45:37 GMT https://community.splunk.com/t5/Splunk-Dev/sending-email/m-p/539884#M9690 yashaswinig2210 2021-02-15T09:45:37Z