Splunk ITSI

Can Splunk IT Service Intelligence (ITSI) send email alerts?

Jarohnimo
Builder

So I've setup Splunk IT Service Intelligence (ITSI) and am interested in setting up Email Alerts with ITSI (if possible)

So far I've been looking into the Multi-KPIAlerts via: https://docs.splunk.com/Documentation/ITSI/2.5.1/User/CreateMulti-KPIAlerts. This creates correlated searches that ultimately create "Notable events" but what about email alerts?

I see the benefit of Multi-KPIAlerts but is there anyway to get an email sent each time a notable event is happens? Or is ITSI able to send out email alerts period?

0 Karma
1 Solution

ehudb
Contributor

According to this doc:

http://docs.splunk.com/Documentation/ITSI/2.4.1/User/CreateCorrelationSearch

ITSI saves the alerts as a correlation search.
You can find the corresponding correlation search to your multiKPIAlert and add an email action there.

View solution in original post

aaraneta_splunk
Splunk Employee
Splunk Employee

@Jarohnimo - Did the answer provided by ehudb help provide a working solution to your question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!

0 Karma

ehudb
Contributor

According to this doc:

http://docs.splunk.com/Documentation/ITSI/2.4.1/User/CreateCorrelationSearch

ITSI saves the alerts as a correlation search.
You can find the corresponding correlation search to your multiKPIAlert and add an email action there.

Get Updates on the Splunk Community!

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Community Feedback

We Want to Hear from You! Share Your Feedback on the Splunk Community   The Splunk Community is built for you ...

Manual Instrumentation with Splunk Observability Cloud: Implementing the ...

In our observability journey so far, we've built comprehensive instrumentation for our Worms in Space ...