Hello Splunkers.
I am in doubt i hope you can help me, i just updated my Splunk to version 7.2.6, and suddenly the alert email stopped sending empty reports. I need to recieve the reports even if they're empy. what can i do to resolve this issue? Thanks
The easiest way, is to disable the currently configured alert, and re-create it as a scheduled report.
Alerts are dependent on trigger conditions to take action (email), reports are not.
https://docs.splunk.com/Documentation/Splunk/latest/Alert/Emailnotification