Realtime alerts - triggers alerts from each search head

I have a realtime saved search that is triggered based on a custom condition. Whenever there is a threshold violation, i get multiple alerts (1 alert from each search head) instead of just one.

Is this due to misconfiguration ?

asked 23 Apr '12, 17:49

srigopinath
21●1
accept rate: 0%

Be the first one to answer this question!

toggle preview

Follow this question

Email:

RSS:

Answers

Answers + Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

email ×176
realtime ×45

Asked: 23 Apr '12, 17:49

Seen: 552 times

Last updated: 23 Apr '12, 17:49

Realtime alerts - triggers alerts from each search head

Follow this question

Splunk Resources

Related questions