Splunk On-Call

How to change alert so that When no one is on-call, notify the next person that starts a shift?

max-developer
Engager

Hi, we currently have one of our on-call schedules to be office hours only (Weekdays 9-5). However, we are noticing that we don't get notified about alerts that get raised over the weekend. Our expectation was that with these alerts, because no one is there to acknowledge them, they will still be there when someone is eventually on the roster at 9am Monday but apparently that is not the case. (The alert is in the list of alerts, but it doesn't page anyone). 

Is there a way to ensure that the person that gets rostered on at 9am Monday will be notified of any alerts that were triggered over the preceding weekend (period where no one was on-call)? 

Thanks

Labels (1)
Tags (2)

bhnpc
New Member
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...