topic Re: Alert Escalation? in Alerting

Alert Escalation?

muebel — Thu, 20 Jun 2013 13:58:23 GMT

Is it possible to have an Alert that will, after some set amount of notifications, start to email to a different set of addresses? That is to say, replicate the behavior possible with Nagios as described here

Re: Alert Escalation?

malmoore — Fri, 21 Jun 2013 14:01:48 GMT

Hi,

There's no way to handle alert escalation out of the box.

You could, however, edit the sendemail.py Python script that fires when an alert triggers to introduce/keep state and handle escalation logic. You would need to be versant in Python to do so.

Cheers

Re: Alert Escalation?

mmaqbool — Wed, 13 Feb 2019 07:36:08 GMT

Hi muebel,

This might be a bit old, but did you find out a way to do this? I am facing a similar situation and this is what I could dig:

1-https://answers.splunk.com/answers/725485/escalate-an-alert-to-a-different-email-address-aft-1.html?minQuestionBodyLength=80

2-https://answers.splunk.com/answers/237950/triggering-an-alert-on-alerts-alert-on-alerts.html

thanks.