topic Re: Trigger alert not seen as email notification in Reporting

Trigger alert not seen as email notification for some events?

Veeru — Thu, 13 Oct 2022 14:26:16 GMT

on 11th October we had 5 events, but we received only 2 email notification.

Below the 5 events of the alert for Yesterday (11th Oct)

1 2022-10-11 23:30:04 BST View Results

2 2022-10-11 23:00:05 BST View Results

3 2022-10-11 22:30:04 BST View Results

4 2022-10-11 22:00:02 BST View Results

5 2022-10-11 14:00:02 BST View Results

But we received email notification only for 1st and 5th event. No email notification for 2nd 3rd and 4th. Could please help us for this discrepancy since we had Client impact and caused so many transactions failures and for issues event was generated but email was not trigged.

Can help me how to resolve this issue

Thank you,
Veeru

Re: Trigger alert not seen as email notification

isoutamo — Thu, 13 Oct 2022 08:25:27 GMT

have you or your client configured a grace period for that alert? If that's the situation then just you need to change that if. you want alerts for all of those.

Another option is that there is some issues with email servers. You should understand that email is not a reliable (100%) method for alerting. You could look from _internal if those emails have sent like

index=_internal sourcetype=splunkd sendemail

You could add another search word if needed.

r. Ismo

Re: Trigger alert not seen as email notification

Veeru — Thu, 13 Oct 2022 08:35:54 GMT

Thanks @isoutamo

I found what's the solution.

Happy Splunking!

Re: Trigger alert not seen as email notification

ktsiagas — Fri, 18 Nov 2022 11:28:42 GMT

Hi @Veeru

as i am afraid that i have the same issue with you, could you please inform us what have you done to fix the problem?

Best Regards.