All Apps and Add-ons

Splunk empy report email


Hello Splunkers.

I am in doubt i hope you can help me, i just updated my Splunk to version 7.2.6, and suddenly the alert email stopped sending empty reports. I need to recieve the reports even if they're empy. what can i do to resolve this issue? Thanks

0 Karma


The easiest way, is to disable the currently configured alert, and re-create it as a scheduled report.

Alerts are dependent on trigger conditions to take action (email), reports are not.

0 Karma