Alerting

How to send an email alert on error?

matstap
Communicator

I have an alert that is setup to send an email when there are no results. The search is returning an error, no results, but no emails are getting sent. Is there a way to make an error the trigger for an alert?

0 Karma

woodcock
Esteemed Legend

It should be the case that if you use the graceful=false parameter to the sendemail command, an email will get sent on error.

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...