I have an alert configured for detecting an issue and even though Splunk dashboard says it sent the alert we haven't received any.
I tried searching in splunk logs (/home/splunk/var/log/splunk/python.log) on splunk server and I don't see an attempt to even send this email. We were receiving other Splunk alerts around that time and still are so the whole alert functionality doesn't seem to be down. There is no record in SMTP logs so looks like it never made it outside splunk server.
How can I find out what caused this alert to not be delivered?
↧