I need to write a custom alert that generates an email notification when a file is not present.
I currently have a daily alert (9pm) set up to notify via email if a .error file is present or not.If the file is present an email including the file is generated.
Now I want to set up a custom email message that is generated when the file is not present. For example, "No file was generated so there is no file attached".
You can clone/copy same alert and set Trigger Condition to Number of Results is equal to 0 and edit alert action Send email add message in Message field.
View solution in original post
For example -
Current scenario -
I have an alert which looks into directory whether an .error file is present or not daily around 9:00 pm .
If it is present it emails the file .
If a file is not present I need to email with a custom text that the file is not present .
Please elaborate on your use case. Where is the file? Who or what is generating it? Is it monitored by Splunk?