topic Re: How do I trigger the same alert multiple times? in Alerting

How do I trigger the same alert multiple times?

rolypolytoyy — Fri, 01 Dec 2023 07:26:07 GMT

I want to repeat same alert 3 times, 5 minutes apart like morning call.

please let me know How can I do it.

Can I organize the logic into queries? or is there any alert option for it?

this is my query for alert event.

index="main" sourcetype="orcl_sourcetype" | sort by _time | tail 1 | where CNT < 10

isoutamo — Fri, 01 Dec 2023 07:28:33 GMT

You should just define that it's using cron schedule and there add schedule as

*/3 * * * *

That will run it every 3rd minutes.

Then don' t add throttling for it.

More info from

r. Ismo

rolypolytoyy — Fri, 01 Dec 2023 08:07:34 GMT

It works! I really thanks for the response!