https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320984#M10772 <P>Hi,</P> <P>Splunk started sending false alerts since today morning even though aler condition hasn't been triggsered. Once we re-enable alert those are working fine. <BR /> Can anybody please help what could be the reason behind this as this is become severity one issue in Splunk Production Environment?</P> <P>Thanks in advance. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Mon, 29 May 2017 09:09:28 GMT p_gurav 2017-05-29T09:09:28Z https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320984#M10772 <P>Hi,</P> <P>Splunk started sending false alerts since today morning even though aler condition hasn't been triggsered. Once we re-enable alert those are working fine. <BR /> Can anybody please help what could be the reason behind this as this is become severity one issue in Splunk Production Environment?</P> <P>Thanks in advance. <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Mon, 29 May 2017 09:09:28 GMT https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320984#M10772 p_gurav 2017-05-29T09:09:28Z https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320985#M10773 <P>Which version of Splunk did it happen?</P> Mon, 29 May 2017 09:47:31 GMT https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320985#M10773 niketn 2017-05-29T09:47:31Z https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320986#M10774 <P>Splunk 6.4.0</P> Mon, 29 May 2017 09:52:16 GMT https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320986#M10774 p_gurav 2017-05-29T09:52:16Z https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320987#M10775 <P>Can somebody please help?</P> Mon, 29 May 2017 10:52:04 GMT https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320987#M10775 p_gurav 2017-05-29T10:52:04Z https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320988#M10776 <P>If it's severity 1 then I'll suggest to raise case with splunk support.</P> Mon, 29 May 2017 11:05:56 GMT https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320988#M10776 harsmarvania57 2017-05-29T11:05:56Z https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320989#M10777 <P>Get a better description, get a <CODE>diag</CODE> file, add the <CODE>bug</CODE> tag to this Question, and open a Support Case.</P> Mon, 29 May 2017 15:44:12 GMT https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320989#M10777 woodcock 2017-05-29T15:44:12Z https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320990#M10778 <P>Can you please provide us more information. Is the alert configured as notable event. if that is the case ,you nee to check your throttling parameters </P> Tue, 12 Sep 2017 15:52:57 GMT https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/320990#M10778 renjujacob88 2017-09-12T15:52:57Z https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/572298#M13180 <P>Any updates ?</P><P>Any recommendations on how to troubleshoot the issue of false alerts during the OS patching of the Splunk servers (Indexers/SearchHeads) ?</P> Mon, 25 Oct 2021 15:28:59 GMT https://community.splunk.com/t5/Alerting/Splunk-false-alerts/m-p/572298#M13180 rajanala 2021-10-25T15:28:59Z