Alerting

Issue with Alert Actions. Is it a known bug?

vaibhavagg2006
Communicator

I have an alert which performs 2 actions-Calls a Slack webhook and sends an email. But sometimes when it triggers it skips the slack webhook action and only triggers an email. There are no error in the logs. The alert_action field in the log only shows email. PFB the log for both scenarios. Any Pointers?

When it triggers both the action:-

06-19-2018 00:15:03.360 -0700 INFO  SavedSplunker - savedsearch_id="nobody;app;Error Alert", search_type="", user="svc", app="app", savedsearch_name="Error Alert", priority=default, status=success, digest_mode=0, scheduled_time=1529392500, window_time=0, dispatch_time=1529392501, run_time=0.752, result_count=1, alert_actions="email,slack", sid="scheduler_c3ZjLmEuc3Bsay1jc3Rv__csrt__RMD54b798c035b9e1f03_at_1529392500_73133_C96C1272-59A3-4440-81F8-D95FEB00CFBB", suppressed=0, fired=1, skipped=0, action_time_ms=1138, thread_id="AlertNotifierWorker-0", message=""

When it triggers only email

 06-22-2018 02:10:22.434 -0700 INFO  SavedSplunker - savedsearch_id="nobody;app;Error Alert", search_type="", user="svc", app="app", savedsearch_name="Error Alert", priority=default, status=success, digest_mode=0, scheduled_time=1529658600, window_time=0, dispatch_time=1529658601, run_time=20.338, result_count=1, alert_actions="email", sid="scheduler_c3ZjLmEuc3Bsay1jc3Rv__csrt__RMD54b798c035b9e1f03_at_1529658600_10207_F9E9498D-8C03-4954-B482-65C8838AC967", suppressed=0, fired=1, skipped=0, action_time_ms=546, thread_id="AlertNotifierWorker-0", message=""
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...