Hi - Need a Splunk Alert for when a Jenkins master goes offline. Like if the host or service quit for any reason. Not the slaves, the master.
New to Splunk. In the middle of a proof of concept using trial Enterprise license. Plus the Splunk App for Jenkins. Collecting data from nine Jenkins masters. Have some other alerts working with the search based on those included with the Jenkins app.
Finding something that is not there is not Splunk's strong suit. See this blog entry for a good write-up on it.
https://www.duanewaddle.com/proving-a-negative/
Agreed, had a similar conversation yesterday with my director, proving a negative can be complex.
Was hoping for an easy answer but suspected if it was easy it would be in the out of the box Splunk App for Jenkins alerts.