Monitoring Splunk

Prepopulate Email Addresses for Alerts (Template)

jlum
New Member

Hello, Is there a way to prepopulate new alerts with a default email address? If so, how would it affect email alerts already setup with recipients manually inserted.

We have an environment with many alerts set up to send emails to different users. We created an email account we want to use to capture all email alerts from Splunk. We would like to add this Splunk email account to receive all existing alerts and also if possible, prepopulate the "send email to" with this email account by default for all new alerts.

Tags (1)
0 Karma
1 Solution

to4kawa
Ultra Champion

cf. alert_actions.conf email

bcc     = <string>
* Any bcc email addresses receiving the alert.

I haven't tried it, can you apply this setting?

View solution in original post

0 Karma

to4kawa
Ultra Champion

cf. alert_actions.conf email

bcc     = <string>
* Any bcc email addresses receiving the alert.

I haven't tried it, can you apply this setting?

0 Karma

jlum
New Member

So simple, i overlooked the idea. Great suggestion! Thank you!

0 Karma

to4kawa
Ultra Champion

you're welcome. I change this to answer. please accept it. happy splunking.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Tech Talk Recap   From Chaos to Control: Scaling Splunk Cloud with Infrastructure as Code Managing apps in ...