topic Re: Correlate data between 2 seperate source and Alert on conditions in Alerting

Correlate data between 2 seperate source and Alert on conditions

amN0P — Mon, 28 Sep 2020 09:54:06 GMT

Hello,
I want to correlate data between logs collected from 2 different sources and I want to alert when a condition is met. How can I create a search for this. Example:

Source 1 log output is: source1_ipaddress visiting_particular_url
Source 2 log output is: source2_ipaddress hostname username

I want to send email alert containing "username" from Source 2 whenever Source 1 logs the event AND source1_ipaddress=source2_ipaddress.
How can I do this? Will appreciate your response. Thanks.

Re: Correlate data between 2 seperate source and Alert on conditions

sairic81 — Fri, 06 Apr 2012 17:07:37 GMT

I am also interested in doing something similar - I am particularly concerned with correlating an alert based off of 2 performance counters. For example: we would like to watch % processor time and available mbytes - should both breach certain conditions then send an alert to me.

Any help would be appreciated.

Re: Correlate data between 2 seperate source and Alert on conditions

cpeteman — Fri, 28 Jun 2013 21:11:37 GMT

This is a duplicate question. It should be removed I believe.

Re: Correlate data between 2 seperate source and Alert on conditions

linu1988 — Mon, 28 Sep 2020 14:12:33 GMT

Same goes for the above question.