# Alerts an Action 7.12 not working **URL:** \ **Category:** Kibana\ **Tags:** elastic-stack-alerting\ **Created:** [April 30, 2021, 3:52pm UTC](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806 "2021-04-30T15:52:45Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![ElasticLiver](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticliver/32/64869_2.png) [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Post date:** [April 30, 2021, 3:52pm UTC](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806/1 "2021-04-30T15:52:45Z")
Hi, I have create some alerts for ML jobs, and is not sending mails, I have tested the send email action and it works, I have set the alerts to the lowest level of anomaly score, both bucket and record (on separated alerts) but I dont get the mail. I check the condition and its ok ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/b/ab93dd927eba06e546462f8a659ee3d3f1746990.png) check de connector and sends mail ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/1/11816e3d3a3e176d79eca5ba4335a8feccb4aeeb.png) I was watching the GUI of alerts and action and I realize that my alerts are ok, but not active, this has something to do with it? how I activate the alerts? ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/4/24945874fdce58b27acabc12050f2b720f91e73a.png) ---
**Author:** ![rashmi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rashmi/32/16391_2.png) [@rashmi](https://discuss.elastic.co/u/rashmi)\ **Post date:** [May 3, 2021, 5:29am UTC](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806/2 "2021-05-03T05:29:47Z")
@gmmorris can you plz shed some light on this ? also in the meantime, it would be good to procure the logs, when this action takes place . Alert instances will come and go from the list depending on whether they meet the alert conditions or not - unless they are muted. If a muted instance no longer meets the alert conditions, it will appear as inactive in the list. This prevents an instance from triggering actions if it reappears in the future. If you want to suppress actions on all current and future instances, you can mute the entire alert. Alert checks continue to run and the instance list will update as instances activate or deactivate, but no actions will be triggered. You can read here, [Alert details | Kibana Guide [7.12] | Elastic](https://www.elastic.co/guide/en/kibana/current/alert-details.html) ![Screen Shot 2021-05-02 at 10.29.01 PM](https://us1.discourse-cdn.com/elastic/original/3X/b/a/ba5f56e9f336d322b8e4e821ee36836fd27332de.png) thanks Rashmi ---
**Author:** ![Patrick\_Mueller](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/patrick_mueller/32/109425_2.png) [@Patrick\_Mueller](https://discuss.elastic.co/u/Patrick_Mueller)\ **Post date:** [May 4, 2021, 11:48am UTC](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806/3 "2021-05-04T11:48:55Z")
Check your Kibana logs - if there is an error executing an action, it should generate an error or warning message i the Kibana log. Can you post the email message you have set? I'm wondering if there is some error in it, somehow, that would prevent the email from being generated. It appears you used the "test connector" function - did that send you an email successfully? Looks like we should have an explainer for some of our terminology, regarding "Active" and "OK". For the screenshot you're using with the alert instances, "Active" means the alert is currently triggering and should be executing it's actions. "OK" means it was previously triggering actions, but is now not triggering actions. In future releases of Kibana, we've relabled "OK" in this page to "Recovered" as a more precise term. ---
**Author:** ![darnautov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/darnautov/32/70608_2.png) [@darnautov](https://discuss.elastic.co/u/darnautov)\ **Post date:** [May 4, 2021, 12:32pm UTC](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806/4 "2021-05-04T12:32:47Z")
hi @ElasticLiver , Can you please share which result type did you use for creating this alert? If it's a Bucket result (the default one), the alert execution looks up for anomalies higher (strict comparison `>`) than specified severity within the interval of 2x bucket span length. So if you set it to `0`, you won't receive notification about buckets with a `0` score. Please refer to the [docs](https://www.elastic.co/guide/en/machine-learning/current/ml-configuring-alerts.html) for more details. ---
**Author:** ![ElasticLiver](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticliver/32/64869_2.png) [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Post date:** [May 10, 2021, 8:16pm UTC](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806/5 "2021-05-10T20:16:23Z")
Hi, thanks for your answer, in the link you game me says this " For each alert, you can configure the `anomaly_score` that triggers it. The `anomaly_score` indicates the significance of a given anomaly compared to previous anomalies. The default severity threshold is 75 which means every anomaly with an `anomaly_score` of 75 or higher triggers the alert." so why don't zero will be considered if in the docs says that 75 or higher will be considerer? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 7, 2021, 8:16pm UTC](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806/6 "2021-06-07T20:16:46Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.