How can I setup Email Alerts for individual KPIs or total "Service Health" on Splunk IT Service Intelligence (ITSI)?
You first want to create a Multi-KPI-Alert. You can read about that at http://docs.splunk.com/Documentation/ITSI/2.4.1/User/CreateMulti-KPIAlerts
Once you create the alert you can configure email alerting by doing the following:
View solution in original post