https://community.splunk.com/t5/Alerting/How-to-create-an-alert-for-LDAP-connectivity-issues/m-p/360124#M6357 <P>Do a search like this for the timerange when it last happened and go to the <CODE>Patterns</CODE> tab. See if you can find a log that indicates the problem and then build an alert from there.</P> <PRE><CODE>index=_* *ldap* </CODE></PRE> Fri, 17 Mar 2017 18:36:32 GMT woodcock 2017-03-17T18:36:32Z https://community.splunk.com/t5/Alerting/How-to-create-an-alert-for-LDAP-connectivity-issues/m-p/360123#M6356 <P>We experience occasionally LDAP connectivity issues, which prevent our users from logging in to the Splunk instances. Is there a way to create an alert for such a case? </P> Fri, 17 Mar 2017 18:28:28 GMT https://community.splunk.com/t5/Alerting/How-to-create-an-alert-for-LDAP-connectivity-issues/m-p/360123#M6356 ddrillic 2017-03-17T18:28:28Z https://community.splunk.com/t5/Alerting/How-to-create-an-alert-for-LDAP-connectivity-issues/m-p/360124#M6357 <P>Do a search like this for the timerange when it last happened and go to the <CODE>Patterns</CODE> tab. See if you can find a log that indicates the problem and then build an alert from there.</P> <PRE><CODE>index=_* *ldap* </CODE></PRE> Fri, 17 Mar 2017 18:36:32 GMT https://community.splunk.com/t5/Alerting/How-to-create-an-alert-for-LDAP-connectivity-issues/m-p/360124#M6357 woodcock 2017-03-17T18:36:32Z https://community.splunk.com/t5/Alerting/How-to-create-an-alert-for-LDAP-connectivity-issues/m-p/360125#M6358 <P>Perfect - thank you.</P> Fri, 17 Mar 2017 22:37:10 GMT https://community.splunk.com/t5/Alerting/How-to-create-an-alert-for-LDAP-connectivity-issues/m-p/360125#M6358 ddrillic 2017-03-17T22:37:10Z