Is it possible to consolidate all Splunk alerts into one email or into a database?

[pradeepmn]

Hi,

Due to heavy Splunk alerts, we sometimes miss out on genuine required alerts.

Is there a possibility of consolidating all Splunk alerts into one email? I see that through json, it just comes as a header or first result and not the complete one.

Other way would be to add all the alerts into some time series database like influx and then send mail using the database queries.

Any added proposal or suggestions would be of great help.

Thanks,
PK

[javiergn]

Why not sending all your alerts to Jira and using it for tracking and even alerting mechanisms?
Take a look at the following:

https://splunkbase.splunk.com/app/1438/
https://answers.splunk.com/answers/289265/how-do-i-integrate-jira-and-splunk-to-monitor-jira.html

Hope that helps.

Thanks,
J