All Apps and Add-ons

Splunk empy report email

julian0125
Explorer

Hello Splunkers.

I am in doubt i hope you can help me, i just updated my Splunk to version 7.2.6, and suddenly the alert email stopped sending empty reports. I need to recieve the reports even if they're empy. what can i do to resolve this issue? Thanks

0 Karma

solarboyz1
Builder

The easiest way, is to disable the currently configured alert, and re-create it as a scheduled report.

Alerts are dependent on trigger conditions to take action (email), reports are not.
https://docs.splunk.com/Documentation/Splunk/latest/Alert/Emailnotification

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...