Alerting

How to make Splunk Alert Throttle more flexible

heng
New Member

Hi,

I'm trying to use Splunk to monitor exception logs, Splunk will send me an email if there is an exception.

I try to set Throttle for 6 hours to avoid getting too many emails. Most of the times 6 hours is fine but sometimes it’s  too long for us, I have to wait 6 hours for the alert come back.  Are there any options can turn the Alert back?

Thanks

 

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Monitoring Postgres with OpenTelemetry

Behind every business-critical application, you’ll find databases. These behind-the-scenes stores power ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...