I have configured triggered alerts & email alerts for an alert which runs every hour with custom count >0 with trigger for each result.
I see triggered alerts for every hour and i don't see any emails triggered for every hour. I get only one email in the morning and thats it..
Can you please help me figure out which configuration i should change so that i receive emails for every triggered alert?
Be sure that your Splunk instance had configuration to send to your mailserver
from = firstname.lastname@example.org
mailserver = myserver.mydomain:25
can u check your scheduled time .put it cron schedule make it * * * * * it will run every one minute
* * * * *
As @harishalipaka said: change the scheduled time on Cron; the expression for "every hour" is: 0 0 * ? * *
0 0 * ? * *
I have tried both (cron & run every hour) options but no luck.. i see them triggered and logged under "Activity->Triggered Alerts" but it is not triggering emails