Alerting

How to get Single Email for all the alerts created

pkumar2
Explorer

I have 6 alerts and each send 6 mails when triggered, This clutters the inbox of receivers of the alerts.

Is there a way to have one single mail, with all alerts data listed in it.

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The six different alerts cannot be combined, but you can tell each to send a single email with all results rather than an email message for each result. That will cut down the messages from 36 to 6.

---
If this reply helps you, Karma would be appreciated.
0 Karma

gjanders
SplunkTrust
SplunkTrust

Along these lines perhaps you could create a single alert and use sendresults (splunkbase) to (more) programmatically send emails?

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...