Alerting

Forwarder alerting via deplyment monitor

tevgey23
Explorer

Is there a way to set up an alert through the deployment monitor (or anywhere), to generate an alert when a forwarder stops monitoring a host or sending data ?

0 Karma
1 Solution

kristian_kolb
Ultra Champion

This functionality is already built into the Deployment Monitor. Scroll down on the first (home) page of the Deployment Monitor. There you will see information regarding Forwarder Warnings, and there is a link for configuring alerting as well.

Hope this helps,

Kristian

View solution in original post

kristian_kolb
Ultra Champion

This functionality is already built into the Deployment Monitor. Scroll down on the first (home) page of the Deployment Monitor. There you will see information regarding Forwarder Warnings, and there is a link for configuring alerting as well.

Hope this helps,

Kristian

tevgey23
Explorer

Great thank you

0 Karma
Get Updates on the Splunk Community!

Wrapping Up Cybersecurity Awareness Month

October might be wrapping up, but for Splunk Education, cybersecurity awareness never goes out of season. ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

What's New in Splunk Observability - October 2025

What’s New?    We’re excited to announce the latest enhancements to Splunk Observability Cloud and share ...