# Alert and Actions 'Notify Every'

**URL:** <https://discuss.elastic.co/t/alert-and-actions-notify-every/238827>\
**Category:** Kibana\
**Tags:** elastic-stack-alerting\
**Created:** [June 26, 2020, 9:53am UTC](https://discuss.elastic.co/t/alert-and-actions-notify-every/238827 "2020-06-26T09:53:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![spike83](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spike83/32/47036_2.png) [@spike83](https://discuss.elastic.co/u/spike83)\
**Post date:** [June 26, 2020, 9:53am UTC](https://discuss.elastic.co/t/alert-and-actions-notify-every/238827/1 "2020-06-26T09:53:35Z")

</div>

Hi,

I'm running 7.8.0 on a 3 node cluster. I have an Alert configured for HDD usage against system.filesystem.used.pct for anything that is greater than or equal to 0.8 (80%).

The alert is configured to check every 5 minutes based on the last 1 minute of index data. This works and I get alerts which are configured to an alert per agent.hostname

The alert if set to 'Notify Every' 5 hours so in theory if the alert isn't resolved I should not get an alert for 5 hours.

The issue is that the alert is triggering every time it runs the check so im receiving an email for the alert every 5 minutes despite the Notify Every being set to 5 hours.

Has anyone had a similar issue, or is there a problem with the my configuration in which it thinks it's a new alert?

---

<div class="post-metadata">

**Author:** ![gmmorris](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gmmorris/32/72624_2.png) [@gmmorris](https://discuss.elastic.co/u/gmmorris)\
**Post date:** [July 22, 2020, 3:45pm UTC](https://discuss.elastic.co/t/alert-and-actions-notify-every/238827/2 "2020-07-22T15:45:38Z")

</div>

Hi,  
The behaviour that you're expecting does sound correct, which suggest something weird has crept into your configuration somehow.

Could you perhaps post screenshots of your exact alert configuration?  
It would help to see the the "Edit Alert" flyout with all its fields.

Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 19, 2020, 3:45pm UTC](https://discuss.elastic.co/t/alert-and-actions-notify-every/238827/3 "2020-08-19T15:45:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.