All Apps and Add-ons

Alert Manager: How to suppress follow on alerts

afx
Contributor

Hi,

looks like I am missing something.

I have a Splunk alert that is a bit spammy. I would like to use the Alert Manager app to give me one alert a day, basically the first time this alert shows up. And be quiet for the rest of the day, just increase the duplicate counter.  

I can get alerts to be counted as duplicates, but I still get e-mails for all of them.

I have not found a way in the suppression rules to hide follow on alerts.

thx

afx

Labels (2)
1 Solution

my2ndhead
SplunkTrust
SplunkTrust

Currently there's no way to suppress emails from follow on alerts. I will take this as a feature request.

View solution in original post

0 Karma

my2ndhead
SplunkTrust
SplunkTrust

Currently there's no way to suppress emails from follow on alerts. I will take this as a feature request.

View solution in original post

0 Karma

afx
Contributor

Absolutely yes please.

So far I have only been toying with Alert manager.

That feature would make it production worthy 😉

thx
afx

0 Karma