Alerting

schedule alert every 5 minutes and send mail once

splunk6161
Path Finder

I set the alert scheduled every 5 minutes. When alarm occour, i receive mail as long as the alarm persist (every 5 minutes with same timestamp)
I don't want this, i would like receive mail once (when alarm occour the first time).
Scheduled: */5 * * * *
Trigger: Is greater than 0
Action: Send mail

alt text

Tags (3)
0 Karma
1 Solution

splunk6161
Path Finder

Solved by setting time range last 10min and throttle 10min!

View solution in original post

0 Karma

splunk6161
Path Finder

Solved by setting time range last 10min and throttle 10min!

View solution in original post

0 Karma

chris1337
Explorer

Hi,

in the alert settings, try to check the Trigger "Once" box below the trigger condition and then the Throttle (set to a time you like)

Greetings Chris

0 Karma

splunk6161
Path Finder

yes, it's "Once" set.

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!