https://community.splunk.com/t5/Alerting/Alerting-splunk/m-p/361363#M6369 <P>You can supress alerts using the throttle tickbox in the alert configuration:</P> <P>See screenshot:<BR /> <A href="https://imgur.com/ot9BVzp">https://imgur.com/ot9BVzp</A></P> <P>See documentation:<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.0.2/Alert/ThrottleAlerts">https://docs.splunk.com/Documentation/Splunk/7.0.2/Alert/ThrottleAlerts</A></P> Fri, 16 Mar 2018 12:52:33 GMT Azeemering 2018-03-16T12:52:33Z https://community.splunk.com/t5/Alerting/Alerting-splunk/m-p/361362#M6368 <P>we have Splunk log monitoring alert configured for x occurrences in 5 minutes so in 30 minutes, we get around 6 incidents.<BR /> We would like to have a solution to have just one incident until first issue is fixed. Is there any way to achieve</P> Fri, 16 Mar 2018 12:12:09 GMT https://community.splunk.com/t5/Alerting/Alerting-splunk/m-p/361362#M6368 arunsundaram 2018-03-16T12:12:09Z https://community.splunk.com/t5/Alerting/Alerting-splunk/m-p/361363#M6369 <P>You can supress alerts using the throttle tickbox in the alert configuration:</P> <P>See screenshot:<BR /> <A href="https://imgur.com/ot9BVzp">https://imgur.com/ot9BVzp</A></P> <P>See documentation:<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.0.2/Alert/ThrottleAlerts">https://docs.splunk.com/Documentation/Splunk/7.0.2/Alert/ThrottleAlerts</A></P> Fri, 16 Mar 2018 12:52:33 GMT https://community.splunk.com/t5/Alerting/Alerting-splunk/m-p/361363#M6369 Azeemering 2018-03-16T12:52:33Z