We created new STG Splunk Alerts and enabled them starting July 27. The strange thing is that they cannot send emails to prj-sens-test@mail.rakuten.com and MS teams email 581e7bfc.OFFICERAKUTEN.onmicrosoft.com@apac.teams.ms for any new alert that happens.
Since we migrated to a new system, we cloned our old STG Splunk Alerts and then updated the name and also the sourcetypes for the new STG Splunk Alerts. Everything else, schedule, email recipient, subject and email message are the same. We have deleted the old STG Splunk Alerts. Our last email from STG Splunk Alert was on July 28, which was from the old Splunk Alert.
We are wondering why it suddenly stopped sending emails. May I ask if you have any ideas?
This is only an issue in STG Splunk. New alerts in PRD Splunk are not working properly.
Our new alerts are here https://stg-asplunksrch101z.stg.jp.local/en-US/app/sens/alerts
This is for STG splunk with the following details:
User name: user_sens
Splunk host: https://stg-asplunksrch101z.stg.jp.local/
Group name: Ichiba Business Expansion Group
App team name: ibe
Service ID: 1013