Can splunk be used as a proactive tool to generate alers

[abhishekabraham]

Hi,
I am new to splunk and I am still learning how to use splunk.

My question is:
Can splunk be used as a proactive tool to generate alers?
What intelligence does splunk have?t
Is splunk's efficiency entirely based on user defined regular expressions?

Regards,
Abhishek Varghese

[lukejadamec]

Yes, Splunk can generate alerts based on criteria that can be determined from machine data.

Splunk is a search engine for machine data that has been generated by a machine and indexed by splunk.

Splunk uses regular expression extensively, but most are not user defined. They are defined by Splunk or by Splunk Apps to index and make searchable a great many known (common) types of machine data. There are times when unique (custom) logs or events require that the user 'educate' Splunk with user defined regex statements.

[lukejadamec]

Here is a good place to start:
http://docs.splunk.com/Documentation/Splunk/6.0/Alert/Aboutalerts

[abhishekabraham]

Hi lukejadamec ,

Can you give me any links to help me with the topic of alerting. Documentation, video, tutorial anything.

And thanks in advance.