Splunk IT Service Intelligence

Splunk IT Service Intelligence: How can I setup Email Alerts for individual KPIs or total "Service Health"?

r34220
Explorer

How can I setup Email Alerts for individual KPIs or total "Service Health" on Splunk IT Service Intelligence (ITSI)?

0 Karma
1 Solution

rossl_splunk
Splunk Employee
Splunk Employee

You first want to create a Multi-KPI-Alert. You can read about that at http://docs.splunk.com/Documentation/ITSI/2.4.1/User/CreateMulti-KPIAlerts

Once you create the alert you can configure email alerting by doing the following:

  1. Go to the navigation bar and select configure->correlation searches.
  2. Find the Multi-KPI-Alert that you just created
  3. Press Edit->By correlation search editor
  4. Expand the "Advanced Options" panel.
  5. Check "Send email"
  6. Fill out the required fields for the email action.
  7. Save

View solution in original post

rossl_splunk
Splunk Employee
Splunk Employee

You first want to create a Multi-KPI-Alert. You can read about that at http://docs.splunk.com/Documentation/ITSI/2.4.1/User/CreateMulti-KPIAlerts

Once you create the alert you can configure email alerting by doing the following:

  1. Go to the navigation bar and select configure->correlation searches.
  2. Find the Multi-KPI-Alert that you just created
  3. Press Edit->By correlation search editor
  4. Expand the "Advanced Options" panel.
  5. Check "Send email"
  6. Fill out the required fields for the email action.
  7. Save
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...