Alerting

Do we have terraform provider for Splunk alerts replicating in multiple environments?

vp
New Member

Do we have terraform provider for splunk alerts replicating in multiple environments

We have search queries and alerts created in one environment -  can we promote same alerts to different environments - Do we have a way to automate this or if we have any terraform provider for replicating alerts across environments

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @vp,

are you speaking of Splunk Enterprise or Enterprise Security or ITSI?

because ES and ITSI aren't multitenant.

Anyway you can create a different set of alerts for each environment as you can suppose or re-engineering them to consider the multitenancy, but this isn't an easy and quick job because you have to modify the indexes structure and all the alerts structure, in other words this is usually a job for Professional Services or at least for a Splunk Architect, not for a question in the Community.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

What's New in Splunk Observability Cloud and Splunk AppDynamics - May 2025

This month, we’re delivering several new innovations in Splunk Observability Cloud and Splunk AppDynamics ...