# Alert trigger not sending SNS message or test message

**URL:** <https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136>\
**Category:** Alerting\
**Created:** [June 22, 2020, 5:38pm UTC](https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136 "2020-06-22T17:38:24Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![FREDDIE2020](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/freddie2020/32/969_2.png) [@FREDDIE2020](https://forum.opensearch.org/u/FREDDIE2020)\
**Post date:** [June 22, 2020, 5:38pm UTC](https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136/1 "2020-06-22T17:38:24Z")

</div>

Hello,

I have an alert that when triggered it does not send SNS alert and the “Submit Test Message” also does not send email alert.

Any ideas on why this is happening in Kibana?

Thanks,

Freddie2020

---

<div class="post-metadata">

**Author:** ![FREDDIE2020](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/freddie2020/32/969_2.png) [@FREDDIE2020](https://forum.opensearch.org/u/FREDDIE2020)\
**Post date:** [June 23, 2020, 12:24pm UTC](https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136/2 "2020-06-23T12:24:44Z")

</div>

Is there not someone who has run into this issue or maybe have a clue to why possibly the SNS and email alerts are not going through even though I run a test message an the run test “true” but no alert?

Any help appreciated!

---

<div class="post-metadata">

**Author:** ![ftianli](https://avatars.discourse-cdn.com/v4/letter/f/58956e/32.png) [@ftianli](https://forum.opensearch.org/u/ftianli)\
**Post date:** [July 8, 2020, 5:19am UTC](https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136/3 "2020-07-08T05:19:51Z")

</div>

Hi Freddie,

If you’re using Amazon Elasticsearch Service, I suggest you check the settings from both Alerting side and SNS side.

1. The SNS topic and IAM role are correct in the Alerting destination.
2. The IAM role has got correct permission and trust relationship.
3. The SNS topic has got validate subscription.

While this forum covers ODFE, and you may also request help through AWS support.

Tianli

---

<div class="post-metadata">

**Author:** ![FREDDIE2020](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/freddie2020/32/969_2.png) [@FREDDIE2020](https://forum.opensearch.org/u/FREDDIE2020)\
**Post date:** [July 8, 2020, 12:09pm UTC](https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136/4 "2020-07-08T12:09:47Z")

</div>

Hi @ftianli ,

I have verified the SNS topic and IAM role are correct in the Alerting destination.  
I have checked IAM role has got correct permissions and verified via documentation.  
I have also checked that SNS has been subscribed and validated.

Is there anything else I can check or that could cause this issue.

Thanks,

FREDDIE2020

---

<div class="post-metadata">

**Author:** ![ftianli](https://avatars.discourse-cdn.com/v4/letter/f/58956e/32.png) [@ftianli](https://forum.opensearch.org/u/ftianli)\
**Post date:** [July 8, 2020, 5:05pm UTC](https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136/5 "2020-07-08T17:05:25Z")

</div>

Hi @FREDDIE2020  
I think you could check the alert information which stores the index.  
The ongoing alerts are stored in `.opendistro-alerting-alerts`, the completed alerts are stored in `.opendistro-alerting-alert-history-<date>`.  
And see if there are any error messages there.  
For example:  
To check an ongoing alert for a specific monitor,

```auto
GET .opendistro-alerting-alerts/_search
{
    "query": {
        "term": {
            "monitor_id": "XXX"
        }
    }
}

```

---

<div class="post-metadata">

**Author:** ![FREDDIE2020](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/freddie2020/32/969_2.png) [@FREDDIE2020](https://forum.opensearch.org/u/FREDDIE2020)\
**Post date:** [July 8, 2020, 9:11pm UTC](https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136/6 "2020-07-08T21:11:43Z")

</div>

Thanks @ftianli  
Let me check that and get back to you.

FREDDIE2020

---

<div class="post-metadata">

**Author:** ![ftianli](https://avatars.discourse-cdn.com/v4/letter/f/58956e/32.png) [@ftianli](https://forum.opensearch.org/u/ftianli)\
**Post date:** [July 8, 2020, 10:49pm UTC](https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136/7 "2020-07-08T22:49:37Z")

</div>

Hope can help you solve the issue. 👍

---

<div class="post-metadata">

**Author:** ![FREDDIE2020](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/freddie2020/32/969_2.png) [@FREDDIE2020](https://forum.opensearch.org/u/FREDDIE2020)\
**Post date:** [July 9, 2020, 2:12pm UTC](https://forum.opensearch.org/t/alert-trigger-not-sending-sns-message-or-test-message/3136/8 "2020-07-09T14:12:05Z")

</div>

Hi @ftianli,

Here is the error I can see after executing the GET .opendisto-alerting-alerts/\_search with monitor\_id:

“state” : “ERROR”,  
“error\_message” : “Error running action:\nUser: arn:aws:sts::xxxxxxxxxxxx:assumed-role/cp-sts-grant-role/south-us-east-1-prod-012511484642 is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::xxxxxxxxxxxx:role/core/tfsesprod-monitoring-admin (Service: AWSSecurityTokenService; Status Code: 403; Error Code: AccessDenied; Request ID: 57d4a32a-fb0b-4499-ac29-5f34ab21f464)”,

Any ideas on what this error means or what is needed to resolve this?

Thanks again @ftianli