Alerting

Email

isin67
New Member

I like to make alert when ever i am opening my email weather i give correct password or the wrong password no matter what is it possible using splunk tool ?

Labels (1)
0 Karma

isin67
New Member

may i know how exactly i search for email login attempts and sent to splunk tool?

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Exactly?  No, I can't tell you exactly how to search because there are too many unknowns (like index names, sourcetype, user names, etc.).  Someone at your company should know where the data resides in Splunk so you can find it.

Also see https://docs.splunk.com/Documentation/Splunk/8.1.3/Search/GetstartedwithSearch and https://www.splunk.com/en_us/training/free-courses/splunk-fundamentals-1.html

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

If your email server logs successful and failed login attempts AND those logs are sent to Splunk then, yes, it is possible to make an alert for that.

Create a search for your email login attempts.  When you have the desired results, click the Save As link and choose Alert.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...