Hi,
looks like I am missing something.
I have a Splunk alert that is a bit spammy. I would like to use the Alert Manager app to give me one alert a day, basically the first time this alert shows up. And be quiet for the rest of the day, just increase the duplicate counter.
I can get alerts to be counted as duplicates, but I still get e-mails for all of them.
I have not found a way in the suppression rules to hide follow on alerts.
thx
afx
Currently there's no way to suppress emails from follow on alerts. I will take this as a feature request.
Currently there's no way to suppress emails from follow on alerts. I will take this as a feature request.
Absolutely yes please.
So far I have only been toying with Alert manager.
That feature would make it production worthy 😉
thx
afx