Trigger action - Send email not working properly for alerts

pdantuuri0411 — Tue, 28 Jan 2020 17:19:42 GMT

We have an alert to notify users through an e-mail whenever there is an OutOfMemory in the server. Recently added a log alert action to run a script that restarts the server as soon as the alert triggers.

From then, whenever the alert triggers and sends an email, it doesn't include "Link to results", "Trigger Conditions" and "inline" even though they are included to send through email in the alert.

Re: Trigger action - Send email not working properly for alerts

manjunathmeti — Wed, 29 Jan 2020 04:16:21 GMT

Can you share the saved searches configurations?

Re: Trigger action - Send email not working properly for alerts

pdantuuri0411 — Wed, 30 Sep 2020 03:53:03 GMT

Hi Manjumanth, below is the saved search configuration for this alert

[DOIT(1m)-JBOSS 7 OutOfMemory]
action.email = 1
action.email.include.trigger = 1
action.email.include.view_link = 0
action.email.inline = 1
action.email.priority = 1
action.email.sendresults = 1
action.email.subject.alert = OutOfMemory Splunk Alert: $name$
action.email.to = test@ekp.org
action.email.useNSSubject = 1
action.logger = 1
alert.digest_mode = 0
alert.suppress = 1
alert.suppress.fields = host
alert.suppress.period = 60s
alert.track = 0
counttype = number of events
cron_schedule = /1 * * * *
description = Alert is triggered when there is an OutOfMemory error in one of the JVMs. Tags(JB7INT, JB7QA, JB7PROD).\
\
Requested by Web Support
dispatch.earliest_time = -1m@m
dispatch.latest_time = @m
display.events.fields = ["source","sourcetype","context_root","referer_domain","status","host","loglevel","field4","ProcessingTime","METHOD","PROTOCOL","REMOTE_HOST","RESPONSE_TIME","STATUS","SIZE","URI","X_FORWARDED_IP","REFERER"]
display.events.maxLines = 0
display.general.enablePreview = 0
display.page.search.mode = verbose
display.statistics.drilldown = row
display.statistics.rowNumbers = 1
display.visualizations.charting.chart = line
enableSched = 1
quantity = 0
relation = greater than
request.ui_dispatch_app = search
request.ui_dispatch_view = search
search = index=i_ ("tag::host"=JB7INT OR "tag::host"=JB7QA OR "tag::host"=JB7PROD) OutOfMemory NOT HeapDumpOnOutOfMemoryError

topic Trigger action - Send email not working properly for alerts in Alerting

Trigger action - Send email not working properly for alerts

Re: Trigger action - Send email not working properly for alerts

Re: Trigger action - Send email not working properly for alerts