Splunk On-Call

Step through all members of a rotation

Gattaca2
Explorer

Hi

New to Splunk On-Call , I have setup a new Team with 3 members, and I've created a rotation and shift with all three as members.

I'm stuck with the best way to setup the Escalation Policy, I want it to call the initial person on call and then contact the other two in turn if they don't respond e.g.

Contact Member 1

Wait 10mins

Contact Member 2

Wait 10mins

Contact Member 3

 

They way I have it at the moment is having three steps in the Escalation Policy:

Step 1 - Immediate - Notify the On-Duty user(s) in rotation

Step 2 - Wait 10 mins - Notify the next user(s) in the current on-duty shift

Step 2 - Wait 20 mins - Notify the next user(s) in the current on-duty shift

 

Is this the best way to do it, the text "Notify the On-Duty user(s) in rotation" has confused me as it suggests that it should call multiple members in a rotation, but I can't find anything that describes how it calls more then the initial on-call person?

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...