https://community.cisco.com/t5/endpoint-security/duplicate-alerts/m-p/3933360#M3194 <P>Difficult to tell without looking at the actual settings but you may have a duplicate somewhere or a mailer set up with alerts.&nbsp; If you can, open a TAC case and they can look into the settings to remove any duplicates that may be present.</P> <P>&nbsp;</P> <P>Thanks,<BR />Matt</P> Tue, 01 Oct 2019 20:38:32 GMT Matthew Franks 2019-10-01T20:38:32Z https://community.cisco.com/t5/endpoint-security/duplicate-alerts/m-p/3933345#M3172 <P>I recently updated some of our email subscriptions under dashboard &gt; events. All of the subscriptions are set to "Immediate (one email per event)" except one. That is our monthly report which is set to "Monthly". But now I'm receiving duplicate alerts for every event that indicate they are coming from the monthly report.</P><P>For example, we had a machine that had a policy update failure. I received four alerts for this one event. One was the correct alert that was generated from the immediate subscription. The other three were from the monthly report but were generated immediately. Am I doing something wrong with these subscriptions? I don't think I am doing anything different than I have in the past.</P><P>Thanks</P> Fri, 21 Feb 2020 05:10:56 GMT https://community.cisco.com/t5/endpoint-security/duplicate-alerts/m-p/3933345#M3172 phonehome 2020-02-21T05:10:56Z https://community.cisco.com/t5/endpoint-security/duplicate-alerts/m-p/3933360#M3194 <P>Difficult to tell without looking at the actual settings but you may have a duplicate somewhere or a mailer set up with alerts.&nbsp; If you can, open a TAC case and they can look into the settings to remove any duplicates that may be present.</P> <P>&nbsp;</P> <P>Thanks,<BR />Matt</P> Tue, 01 Oct 2019 20:38:32 GMT https://community.cisco.com/t5/endpoint-security/duplicate-alerts/m-p/3933360#M3194 Matthew Franks 2019-10-01T20:38:32Z