Alerting

Why is there a delay in custom alert firing?

Prakash493
Communicator

Hi

I have an issue i have an alert is running which invokes the custom script when it fires , but i have a 3 min delay , when i saw logs i find out the logs are ingesting on right time no delay in log ingestion , when the alert is running its showing right time but when it invoking the custom script their is a delay of 3 min ? any one can please help me ?

0 Karma

woodcock
Esteemed Legend

Make sure that ALL of your servers are using NTP. I assume that the problem is clock drift.

0 Karma

Prakash493
Communicator

No its not real time , Thanks i will check if it uses NTP or not ?

Thanks

0 Karma

woodcock
Esteemed Legend

You are not running a real-time search for this, are you?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...