All Apps and Add-ons

Alert Manager: How to suppress follow on alerts

Contributor

Hi,

looks like I am missing something.

I have a Splunk alert that is a bit spammy. I would like to use the Alert Manager app to give me one alert a day, basically the first time this alert shows up. And be quiet for the rest of the day, just increase the duplicate counter.  

I can get alerts to be counted as duplicates, but I still get e-mails for all of them.

I have not found a way in the suppression rules to hide follow on alerts.

thx

afx

Labels (2)
1 Solution

SplunkTrust
SplunkTrust

Currently there's no way to suppress emails from follow on alerts. I will take this as a feature request.

View solution in original post

0 Karma

SplunkTrust
SplunkTrust

Currently there's no way to suppress emails from follow on alerts. I will take this as a feature request.

View solution in original post

0 Karma

Contributor

Absolutely yes please.

So far I have only been toying with Alert manager.

That feature would make it production worthy 😉

thx
afx

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!