We have 4 search head servers in search cluster. One of them was added recently.
When Splunk alerts come from "old" servers , they show "**Splunk Alert** splunk@hostname.acml.com" as a sender.
Splunk Alerts from a newly added server has just "splunk@hostname.acml.com". As a result, a recipient of the email sees this email address, not the name "**Splunk Alert**".
Cannot find where to change it. All servers have the same /opt/splunk/etc/system/default/alert_actions.conf
Thank you in advance for any suggestions.
↧