schedule alert every 5 minutes and send mail once

[splunk6161]

I set the alert scheduled every 5 minutes. When alarm occour, i receive mail as long as the alarm persist (every 5 minutes with same timestamp)
I don't want this, i would like receive mail once (when alarm occour the first time).
Scheduled: */5 * * * *
Trigger: Is greater than 0
Action: Send mail

[splunk6161 · Accepted solution]

Solved by setting time range last 10min and throttle 10min!

[chris1337]

Hi,

in the alert settings, try to check the Trigger "Once" box below the trigger condition and then the Throttle (set to a time you like)

Greetings Chris

[splunk6161]

yes, it's "Once" set.