topic Re: Splunk rules and their way how it is configured in Splunk Search

Splunk rules and their way how it is configured

Umamaheshwar210 — Fri, 09 Jan 2015 10:19:25 GMT

Hi ,

We are using Splunk 6.1.1 Ver .I would like to know few Information from Splunk.

Their are alerts configured in Splunk So my interest is to know more information about those alerts and the IP address which are configured in those alerts.As simple as I would like to know the rules that triggers the alerts on Splunk and the configuration.

Re: Splunk rules and their way how it is configured

kendrickt — Fri, 09 Jan 2015 11:47:55 GMT

Hi Umam,

I'm not 100% sure what you mean, but "alerts" are completely configurable by the user - so you get it to alert you in a method you choose according to a trigger you set.

Take a look at this:

http://docs.splunk.com/Documentation/Splunk/6.1.1/Alert/Alertexamples

Re: Splunk rules and their way how it is configured

vinodmadaan — Thu, 26 Feb 2015 12:54:16 GMT

Hi Umam,

I guess you need to know how you can configure the Alerts through the config file, The following link shows the scripts and rules that we follow to do the same:

http://docs.splunk.com/Documentation/Splunk/6.2.1/Alert/Configuringalertsinsavedsearches.conf

I hope this answer's your question.

Vinod.