All Apps and Add-ons

Splunk empy report email

Explorer

Hello Splunkers.

I am in doubt i hope you can help me, i just updated my Splunk to version 7.2.6, and suddenly the alert email stopped sending empty reports. I need to recieve the reports even if they're empy. what can i do to resolve this issue? Thanks

0 Karma

Builder

The easiest way, is to disable the currently configured alert, and re-create it as a scheduled report.

Alerts are dependent on trigger conditions to take action (email), reports are not.
https://docs.splunk.com/Documentation/Splunk/latest/Alert/Emailnotification

0 Karma