Reporting

In GUI, I cannot see email settings, which was deployed by Deployment Server, in the GUI

Masa
Splunk Employee
Splunk Employee

I deployed alert_actions.conf to a search head through a Deployment Server.
The email alert works. But I cannot see the setting in the WebGUI. It shows no settings.

In splunkd.log, there is no error or warning message.
A btool output shows the correct email settings.

Why can I see the settings through GUI?
How I can make it available through GUI, too?

0 Karma
1 Solution

Masa
Splunk Employee
Splunk Employee

It is related to a permission for an App which was deployed by a deployment server.

Usually you do not encounter this situation because Splunk Web can still shows each apps configuration per app.

But, "email" setting must be "global". So, you need local.meta to set "export = system".

- local.meta
[]
# This stanza is to make all the app's configuration to "global"
export = system

Or, if it's only for email.

- local.meta
[alert_actions/email]
export = system
owner = nobody

View solution in original post

thambisetty
SplunkTrust
SplunkTrust

could u tell me how did u configured email settings?

————————————
If this helps, give a like below.
0 Karma

Masa
Splunk Employee
Splunk Employee

It is related to a permission for an App which was deployed by a deployment server.

Usually you do not encounter this situation because Splunk Web can still shows each apps configuration per app.

But, "email" setting must be "global". So, you need local.meta to set "export = system".

- local.meta
[]
# This stanza is to make all the app's configuration to "global"
export = system

Or, if it's only for email.

- local.meta
[alert_actions/email]
export = system
owner = nobody
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...