My Splunk alerts are configured to send an e-mail when triggered. How do I make sure that Splunk only sends one e-mail per violation? It seems to be sending multiple emails everytime for same violation.  Settings are as follows Run on cron schedule time range: -24h cron: 42 * * * * trigger when number of results is >0 trigger : Once throttle : 60s ... View more