# Alerts email quickly **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [October 31, 2019, 10:47am UTC](https://community.graylog.org/t/alerts-email-quickly/12568 "2019-10-31T10:47:18Z")\ **Posts on this page:** 15\ **Page:** 1
**Author:** ![emper0r](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/emper0r/32/5255_2.png) [@emper0r](https://community.graylog.org/u/emper0r)\ **Post date:** [October 31, 2019, 10:47am UTC](https://community.graylog.org/t/alerts-email-quickly/12568/1 "2019-10-31T10:47:19Z")
Hi…. Why or how if I got this conditions on my alert event, the events just accumulate and send all notification alerts every hour?. I want to received quickly after query search and found a hit. ### Filter & Aggregation Type Filter Search Query Insufficient system resources Streams [All messages](http://vmtestx:9000/streams/000000000000000000000001/search) Search within 1 minutes Execute search every 1 minutes ---
**Author:** ![Christoph](https://avatars.discourse-cdn.com/v4/letter/c/eb8c5e/32.png) [@Christoph](https://community.graylog.org/u/Christoph)\ **Post date:** [October 31, 2019, 1:42pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/2 "2019-10-31T13:42:09Z")
When the option “Filter has result” ist set, you can get a email for every event. ![grafik](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/2/2a045a229f466b923a075e5ed39f4a2a0b7550fc.png) ---
**Author:** ![emper0r](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/emper0r/32/5255_2.png) [@emper0r](https://community.graylog.org/u/emper0r)\ **Post date:** [October 31, 2019, 2:47pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/3 "2019-10-31T14:47:21Z")
that’s not happend… that’s why i’m asking… and sorry I rectify… this happend every 30min not 1hour as before but anyway… it’s 30min later after event… . ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [November 4, 2019, 8:26am UTC](https://community.graylog.org/t/alerts-email-quickly/12568/4 "2019-11-04T08:26:57Z")
dear @emper0r did you notice that we already have some threads about the topic? Did you checked if your environment has the same source of problem? Did you checked if that will be fixed in the upcoming bugfix release? It might have multiple reasons and you need to find the root in YOUR environment yourself, we can only give guidance by guessing and from what you have provided, guessing is impossible. thx Jan ---
**Author:** ![denis.zvonov](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/denis.zvonov/32/5350_2.png) [@denis.zvonov](https://community.graylog.org/u/denis.zvonov)\ **Post date:** [November 14, 2019, 4:33pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/5 "2019-11-14T16:33:59Z")
I have the same problem. Alert mail notifications are accumulated and sent once in a while, like 40 minutes after Alerts fired. All this started after upgrade to 3.1. ---
**Author:** ![denis.zvonov](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/denis.zvonov/32/5350_2.png) [@denis.zvonov](https://community.graylog.org/u/denis.zvonov)\ **Post date:** [November 14, 2019, 4:44pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/6 "2019-11-14T16:44:31Z")
Can you please suggest which loggers should be set to DEBUG or TRACE in log4j.xml so I can debug the problem in my environment? ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [November 15, 2019, 10:47am UTC](https://community.graylog.org/t/alerts-email-quickly/12568/7 "2019-11-15T10:47:14Z")
you should first check the events you have configured logical and check if you have the latest version (3.1.3 at the time of writing) as this include some fixed … ---
**Author:** ![denis.zvonov](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/denis.zvonov/32/5350_2.png) [@denis.zvonov](https://community.graylog.org/u/denis.zvonov)\ **Post date:** [November 15, 2019, 11:17am UTC](https://community.graylog.org/t/alerts-email-quickly/12568/8 "2019-11-15T11:17:01Z")
What do you mean by “logical”? I have 2 facts: 1st fact that Alerts are generated in Graylog in time and according to expected logic and I see them in Graylog. 2nd fact is that Notifications submission to the mail server happened 40 min after the Alert happened, submission happened in a batch. I updated to 3.1.3 (was 3.1.2) yesterday. Yet, I would like to add more logging as if the problem repeats - greylog logs have pretty much no info. ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [November 15, 2019, 11:45am UTC](https://community.graylog.org/t/alerts-email-quickly/12568/9 "2019-11-15T11:45:25Z")
he @denis.zvonov fromt he previous given information it was not visible that the event is create in time and with the given logic but that the notification is having an issue. Did you checked in your Mail server logs if that messages was received in time but delivered later? Does the “test notification” you can start in the Graylog UI is delivered directly? ---
**Author:** ![denis.zvonov](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/denis.zvonov/32/5350_2.png) [@denis.zvonov](https://community.graylog.org/u/denis.zvonov)\ **Post date:** [November 15, 2019, 1:16pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/10 "2019-11-15T13:16:54Z")
Hi Jan, Yes, I checked my mail server. As I mentioned, the mails were submitted to the mail server from Graylog with the great delay after Alert generation. Test notifications usually worked fine (immediate arrival), but I have not tried them recently, and now I upgraded and restarted the server. ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [November 15, 2019, 1:24pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/11 "2019-11-15T13:24:10Z")
do you mind opening a bug report over at github? It does not look right from the given information. ---
**Author:** ![denis.zvonov](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/denis.zvonov/32/5350_2.png) [@denis.zvonov](https://community.graylog.org/u/denis.zvonov)\ **Post date:** [November 15, 2019, 1:33pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/12 "2019-11-15T13:33:10Z")
Do I have rights for that (and where is it at all)? Sorry, I am new to this community. ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [November 15, 2019, 1:38pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/13 "2019-11-15T13:38:43Z")
He @denis.zvonov sorry for not providing the link - [https://github.com/Graylog2/graylog2-server/issues](https://github.com/Graylog2/graylog2-server/issues) We have issue templates that will guide you to include all necessary information. ---
**Author:** ![denis.zvonov](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/denis.zvonov/32/5350_2.png) [@denis.zvonov](https://community.graylog.org/u/denis.zvonov)\ **Post date:** [November 15, 2019, 2:12pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/14 "2019-11-15T14:12:56Z")
> > > Expected Behavior > When Alert occurs, if email notification is configured, email is sent within seconds. > Current Behavior > Alerts generated in time, as defined by... ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [November 29, 2019, 2:13pm UTC](https://community.graylog.org/t/alerts-email-quickly/12568/15 "2019-11-29T14:13:02Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.