Alerting

Duplicate "Send Email" option in Splunk Enterprise 7

splunkdivya
Explorer

Having duplicate "Send Email" options on Splunk 7 Enterprise, not sure what causing it:
PFB the screenshot
alt text

Any pointers are highly appreciated.
- Best,
- Splunkdivya

0 Karma

DavidHourani
Super Champion

Hi @splunkdivya,

Seems like you have a duplicate configuration for your send email modular alert action.

Have a read here in case you don't know how modular alerts work :
https://docs.splunk.com/Documentation/SplunkCloud/latest/AdvancedDev/ModAlertsIntro

In order to resolve this, search on your SH for alert_actions.conf and identify the location of the duplicate send email action. Once that's done all you have to do is get rid of it and you'll be back to a single action.

Let me know if that helps.

Cheers,
David

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...