I need to write a custom alert that generates an email notification when a file is not present.
I currently have a daily alert (9pm) set up to notify via email if a
.error file is present or not.
If the file is present an email including the file is generated.
Now I want to set up a custom email message that is generated when the file is not present.
For example, "No file was generated so there is no file attached".
Please elaborate on your use case. Where is the file? Who or what is generating it? Is it monitored by Splunk?
For example -
Current scenario -
I have an alert which looks into directory whether an .error file is present or not daily around 9:00 pm .
If it is present it emails the file .
If a file is not present I need to email with a custom text that the file is not present .
You can clone/copy same alert and set Trigger Condition to Number of Results is equal to 0 and edit alert action Send email add message in