Hi @sridharlakshmanan,
did you configured other users than admin as Alert Manager Virtual Users, following the below procedure?
Alert Manager Users
Users in the Alert Manager are supposed to be virtual. In addition to users in Splunk's ecosystem, e.g. Splunk internal users or users from an external LDAP repository, virtual Alert Managers users allow Incident assignment to external parties without creating them as a real Splunk user.
Note: There is no additional functionality than assigning Incidents to such users. They can't login to Splunk.
Add a Virtual Alert Manager user:
Open Settings -> User Settings in the > Alert Manager Ensure the active user directory is set to both Fill in a username and his e-mail address (can be used as current_owner variable in Notification Schemes) and press Save
Users Go back to the Incident Posture view and assign an Incident to the new user
I'm not speaking of normal Splunk Users, I'm speaking of setting the other users as Virtual users inside Alert manager following the procedure described in the documentation.
Ciao.
Giuseppe
