Alerting

How can I configure Alerts not to send blank/empty reports in PDF?

denisevw
Path Finder

I've configured about 75 Alerts to email reports on a daily basis. Some of these reports will have no data. I don't want the Alert to send out the report if it is blank or empty.

I did configure the Alert Condition:

(from savedsearches.conf)

quantity = 1

relation = greater than

The blank/empty report still gets emailed...

Tags (2)
0 Karma

chris_knott
New Member

Hello,

Do you have it to report on each search or per result? When importing my alerts from v5 into a new v6 cluster the option default to each search so any real time alerts were sending blank reports. Once I switched to per result I only get the alert email if there is a matching result.

Thanks,

Chris

0 Karma
Get Updates on the Splunk Community!

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...

Announcing General Availability of Splunk Incident Intelligence!

Digital transformation is real! Across industries, companies big and small are going through rapid digital ...