Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Other Using Splunk
- :
- Alerting
- :
- Re: Getting email notification from cron daemon
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Team,
Am getting back to back email from cron daemon, would like to know reason of email notification and also these notification are important , if not then can we stop such email notification.
I have attached sample screenshot of email notification.Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @rakesh44
though cron running as root, the script used for running log rotation script might be running as other user(non root). /var/log usually owned by root.
I have my own VM running locally, have two users root, lkoppolu. With lkoppolu I cant even access /var/log. change permissions for the user. It will work
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @rakesh44
though cron running as root, the script used for running log rotation script might be running as other user(non root). /var/log usually owned by root.
I have my own VM running locally, have two users root, lkoppolu. With lkoppolu I cant even access /var/log. change permissions for the user. It will work
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
These are not Splunk messages. Consider asking about them on Stack Overflow or a similar forum.
Only you and your team can determine if the messages are important - what's unimportant to some may be critical to others.
If you decide to ignore the messages we can help you with that.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello @rakesh44
Did you see in your application, in tab ALERTS if there is activated alert and check the actions , it can be email action somewhere?
See Splunk Platform & Observability Innovations at Cisco Live EMEA
The OpenTelemetry Certified Associate (OTCA) Exam
From Manual to Agentic: Level Up Your SOC at Cisco Live
