Automate the Splunk alert creation

sampath118 · ‎01-03-2020

Hi,
Can the Splunk alert creation be automated using tools like Ansible?

Lets say i have multiple alerts and one environment and i want to promote the same alerts to different environments and i dont want to create them manually or change the parameters manually. How can i achieve this?

Thanks in advance.

Sampath

richgalloway · ‎01-03-2020

Put the alerts in a custom app and upload that app to all environments.

---
If this reply helps you, Karma would be appreciated.

Automate the Splunk alert creation

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Join the Conversation

Automate the Splunk alert creation

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A