# How to suppress multiple alerts? **URL:** \ **Category:** Graylog Central (peer support)\ **Tags:** alert\ **Created:** [December 18, 2023, 1:28pm UTC](https://community.graylog.org/t/how-to-suppress-multiple-alerts/30986 "2023-12-18T13:28:15Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![zapa11](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/zapa11/32/14385_2.png) [@zapa11](https://community.graylog.org/u/zapa11)\ **Post date:** [December 18, 2023, 1:28pm UTC](https://community.graylog.org/t/how-to-suppress-multiple-alerts/30986/1 "2023-12-18T13:28:15Z")
Hello guys, I have multiple alerts and events definitions. The problem is that , same alert is triggered multiple times. I want to receive just 1 alerts instead of multiples, for same issue. Please check the picture below : ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/a/2/a2567d46d511d0a1402bfeb8ac06149f6fd34666.png) ---
**Author:** ![patrickmann](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/patrickmann/32/9091_2.png) [@patrickmann](https://community.graylog.org/u/patrickmann)\ **Post date:** [December 18, 2023, 1:38pm UTC](https://community.graylog.org/t/how-to-suppress-multiple-alerts/30986/2 "2023-12-18T13:38:51Z")
Adjust the time window for the event or use aggregation to reduce repetition. ---
**Author:** ![Joel\_Duffield](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Joel\_Duffield](https://community.graylog.org/u/Joel_Duffield)\ **Post date:** [December 18, 2023, 1:45pm UTC](https://community.graylog.org/t/how-to-suppress-multiple-alerts/30986/3 "2023-12-18T13:45:12Z")
If this is just a filter event (not an aggregation) in 5.2.2 you can limit how many events are created. ---
**Author:** ![zapa11](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/zapa11/32/14385_2.png) [@zapa11](https://community.graylog.org/u/zapa11)\ **Post date:** [December 19, 2023, 8:48am UTC](https://community.graylog.org/t/how-to-suppress-multiple-alerts/30986/4 "2023-12-19T08:48:45Z")
Hello, I tested that limit and it has some issues. For example, if i set it to 10 alerts. After 10 alerts it will send me an event notification (which i want to disable if possible ) and then the event notification stops. I just need to find a way for it to not send same alert multiple times. Aggregation is not a solution, because maybe the alert it will be triggered only once. ---
**Author:** ![Joel\_Duffield](https://avatars.discourse-cdn.com/v4/letter/j/71c47a/32.png) [@Joel\_Duffield](https://community.graylog.org/u/Joel_Duffield)\ **Post date:** [December 19, 2023, 11:15pm UTC](https://community.graylog.org/t/how-to-suppress-multiple-alerts/30986/5 "2023-12-19T23:15:59Z")
What are you actually trying to find in the event? Aggregations may actually work, but it depends on what you kind of filter you are trying to create. ---
**Author:** ![Arie](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/arie/32/8094_2.png) [@Arie](https://community.graylog.org/u/Arie)\ **Post date:** [December 20, 2023, 8:36am UTC](https://community.graylog.org/t/how-to-suppress-multiple-alerts/30986/6 "2023-12-20T08:36:22Z")
You could set a grace period in Notifications to suppress the other alerts. ---
**Author:** ![zapa11](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/zapa11/32/14385_2.png) [@zapa11](https://community.graylog.org/u/zapa11)\ **Post date:** [December 20, 2023, 10:26am UTC](https://community.graylog.org/t/how-to-suppress-multiple-alerts/30986/7 "2023-12-20T10:26:37Z")
@Joel_Duffield i am using virustotal to check if the destinations ip’s are malicious or not, and then block them. The problem is that my firewall is letting the connections and i am seeing several alerts triggered within seconds, for sale IP, please check the picture below. My goal is to set the event to trigger just 1 alert if a malicious ip is found. @Arie you idea works, because i am also using Slark to receive the notification and that will suppress it. But, it will also suppress the number of alerts that will appear in Graylog? I am testing it now. ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/9/c/9c535c4389bffff330d6bdc288e5ea83c32126c9.png) ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [January 3, 2024, 10:27am UTC](https://community.graylog.org/t/how-to-suppress-multiple-alerts/30986/8 "2024-01-03T10:27:03Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.