# Stop sending duplicate error in mail alert in watcher

**URL:** https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867
**Category:** Elasticsearch
**Created:** [August 27, 2019, 3:34am UTC](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867 "2019-08-27T03:34:35Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![saurabh06](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/saurabh06/32/51529_2.png) [@saurabh06](https://discuss.elastic.co/u/saurabh06)
#### Post date: [August 27, 2019, 3:34am UTC](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867/1 "2019-08-27T03:34:35Z")

</div>

How to stop executing action if their is same hits came again for the matched condition.i.e i want to send mail alert if their are distinct error came.  
I want to scan the log every 10 min interval but if their occurs same error post 10 min then i will not send alert for that.

---

<div class="post-metadata">

### Author: ![rugenl](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rugenl/32/12887_2.png) [@rugenl](https://discuss.elastic.co/u/rugenl)
#### Post date: [August 27, 2019, 2:54pm UTC](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867/2 "2019-08-27T14:54:53Z")

</div>

This is partially addressed [here](https://www.elastic.co/guide/en/elastic-stack-overview/6.5/actions.html#actions-ack-throttle)

I think what you are looking for is something like "auto acknowledgement".

I don't know if a very long throttle time is set, (say a day), the watch triggers, then clears in 1 hour, then triggers in another hour, if it's still considered inside the original day throttle, or if the watch clearing resets the throttle time.

If not, some external automation might be necessary to do the acknowledgement.

We use Zabbix for alerting, if I ever get caught up with things, I'd like to integrate watch alerting into our existing Zabbix notification structure. I don't want to reinvent the wheel for our notification system inside Elastic when we already have it.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 24, 2019, 2:54pm UTC](https://discuss.elastic.co/t/stop-sending-duplicate-error-in-mail-alert-in-watcher/196867/3 "2019-09-24T14:54:59Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
