topic Re: How to delay the trigger alert in x minutes? in Alerting https://community.splunk.com/t5/Alerting/How-to-delay-the-trigger-alert-in-x-minutes/m-p/569507#M13067 <P>Set up the alert so that every minute it looks back 5 minutes and looks for events 5 minutes ago which are still present and only generate results when this is true.</P> Mon, 04 Oct 2021 06:41:42 GMT ITWhisperer 2021-10-04T06:41:42Z How to delay the trigger alert in x minutes? https://community.splunk.com/t5/Alerting/How-to-delay-the-trigger-alert-in-x-minutes/m-p/569493#M13066 <P>How can I delay the trigger of the email alert to lets say 5 minutes?</P><P>Ex.</P><P>The alert detected the response_code=500, but I would like the email alert to trigger on the 5th minute if the response_code is still the same (500). Is it possible?</P><P>Thanks!</P> Mon, 04 Oct 2021 03:11:25 GMT https://community.splunk.com/t5/Alerting/How-to-delay-the-trigger-alert-in-x-minutes/m-p/569493#M13066 EMBautista 2021-10-04T03:11:25Z Re: How to delay the trigger alert in x minutes? https://community.splunk.com/t5/Alerting/How-to-delay-the-trigger-alert-in-x-minutes/m-p/569507#M13067 <P>Set up the alert so that every minute it looks back 5 minutes and looks for events 5 minutes ago which are still present and only generate results when this is true.</P> Mon, 04 Oct 2021 06:41:42 GMT https://community.splunk.com/t5/Alerting/How-to-delay-the-trigger-alert-in-x-minutes/m-p/569507#M13067 ITWhisperer 2021-10-04T06:41:42Z Re: How to delay the trigger alert in x minutes? https://community.splunk.com/t5/Alerting/How-to-delay-the-trigger-alert-in-x-minutes/m-p/569509#M13068 <P>Thanks for the reply. Do you mean in the earliest and latest configuration in the time range of the alert?</P><P>&nbsp;</P><P>Thanks!</P> Mon, 04 Oct 2021 06:50:22 GMT https://community.splunk.com/t5/Alerting/How-to-delay-the-trigger-alert-in-x-minutes/m-p/569509#M13068 EMBautista 2021-10-04T06:50:22Z Re: How to delay the trigger alert in x minutes? https://community.splunk.com/t5/Alerting/How-to-delay-the-trigger-alert-in-x-minutes/m-p/569511#M13069 <P>Yes, use -5m@m and&nbsp;@m respectively to cover the previous 5 minutes</P> Mon, 04 Oct 2021 07:00:42 GMT https://community.splunk.com/t5/Alerting/How-to-delay-the-trigger-alert-in-x-minutes/m-p/569511#M13069 ITWhisperer 2021-10-04T07:00:42Z