Hello, Is there a way to prepopulate new alerts with a default email address? If so, how would it affect email alerts already setup with recipients manually inserted.
We have an environment with many alerts set up to send emails to different users. We created an email account we want to use to capture all email alerts from Splunk. We would like to add this Splunk email account to receive all existing alerts and also if possible, prepopulate the "send email to" with this email account by default for all new alerts.
bcc = <string>
* Any bcc email addresses receiving the alert.
I haven't tried it, can you apply this setting?
bcc = <string>
* Any bcc email addresses receiving the alert.
I haven't tried it, can you apply this setting?
So simple, i overlooked the idea. Great suggestion! Thank you!
you're welcome. I change this to answer. please accept it. happy splunking.