Alerting

Not receiving Slack alert but receiving email alert (two alert actions)

Ninja_splunk
Splunk Employee
Splunk Employee

Hi guys,

I've tried to setup an alert with two alert actions (email and Slack) from a custom app. When the alert has triggered,

02-09-2024 21:40:04.155 +0000 INFO SavedSplunker - savedsearch_id="nobody;abc example alert (NONPRD)", search_type="scheduled", search_streaming=0, user="myself@myself.com", app="abc", savedsearch_name="example (NONPRD)", priority=default, status=success, digest_mode=1, durable_cursor=0, scheduled_time=1707514800, window_time=-1, dispatch_time=xxxxxxxx, run_time=0.884, result_count=2, alert_actions="email", sid="scheduler_xxxxxxxxxx", suppressed=0, thread_id="AlertNotifierWorker-0", workload_pool="standard_perf"
 

However, i've received email alert but not slack alert, is there anyway to debug why the slack alert was not sent when there are two alert actions? How to know when the webhook URL is correct and working? Can someone please provide the complete steps to troubleshoot issues like this?

Thank you!

T

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...