RE: Jumbled mess, sorry, I tried to format it best I could in Rich Text view.
> Did the 10+ contain a 100300 alert? > Strangely enough, no. It was all 100301, among others. It was pretty much all rules over 10+ (the email threshold at the time) and rules configured to blast email. I think it's sending them the global email alerts instead of the specific rule alerts, hence the confusion. "These above should get all email alerts." Do you mean the 100301 will trigger an email based on the <email_alerts> directive? Can you clarify what you mean by that? > Perhaps the granular email configurations can't handle multiple > email_to entries? I haven't tried it, but I guess I can figure it out, > > > It'd be nice if you could test it out in your env with a similar ruleset. Maybe the 100301 rule is confusing it somehow?
