In order to troubleshoot this issue, kindly check below:
Check triggered alerts from
Settings > Knowledge > Searches, reports and alerts > Alerts column
OR
Activity > Triggered alerts
Check under python.log for any error/warning message related to savedsearch/alert you want to trigger
Also, you may need to check for the skipped searches. Maybe during skippedsearches time, you were running into your maxconcurrent limit, which is why this search was skipped multiple times and that is why you did not receive the alert.
Example of the log is as below:
INFO SavedSplunker - savedsearch_id="nobody;SystemManage;SVaccount-authfail-emailsend", user="abcd", app="", savedsearch_name="", priority=, status=skipped, reason="maxconcurrent limit reached", scheduled_time=1498555860, window_time=0
In case if you see the above info message in logs, you should increase the limit for the maximum number of concurrent searches in limits.conf
For reference, kindly check: https://answers.splunk.com/answers/4888/getting-error-maximum-number-of-concurrent-searches-has-been-reached.html
... View more