How can I create an alert to monitor document publishing failures on remote shares?

New Member

We use Splunk to support legacy reporting, publishing scheduled search results as documents to remote AD network shares. In many cases, we overwrite the previous version of the file.
Is there a way to create an alert triggered when a file fails to publish (e.g. problems with network, share, share permissions, locked file, etc.)?

Many thanks!

Tags (3)
0 Karma