Alert Triggers - is there a maximum number of triggers I can set?

New Member

I have Splunk light (currently bring upgraded to Enterprise but won't be for a while). I have 6 alert triggers written. But only the first 5 active ones work. If I make the first one I created not active, resave the 6th one, it then works.

So it seems Splunk Light only may allow 5 active trigger alerts, but I can't find this written anywhere, am I right or do I have a different problem?

0 Karma

New Member

Thanks for your reply, but this is not on a search.

Alerts are triggered based upon a constant monitoring of the inbound data to match a string. I have so little data coming in that there is hardly any data at all in this environment.

I have set up 5 working Alert triggers, each when matched adds an alert, writes what it finds to a text file, then calls an external script. The 5 I have work fine. Then I add a 6th Alert Trigger and it does not trigger. but if I delete any of the other 5 the new one I have written starts to work. This had made me think that Splunk Light (Not SplunkCloud) has some limitation but nobody seems to know if that is correct. I can see no errors in the log at all.

0 Karma

Super Champion

Hi @neillasher,

Please have a look in your _internal log as to why the searches didn't run.

If it's a system limit problem try playing around with the limits as shown here :

If it's a user limit problem then simply increase the max number of concurrent searches per user.

If you can paste in the errors you find that are stopping the search from running we can help you find a solution.


0 Karma
Get Updates on the Splunk Community!

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...