Alerting

How to create an alert for LDAP connectivity issues?

Ultra Champion

We experience occasionally LDAP connectivity issues, which prevent our users from logging in to the Splunk instances. Is there a way to create an alert for such a case?

Tags (3)
0 Karma
1 Solution

Esteemed Legend

Do a search like this for the timerange when it last happened and go to the Patterns tab. See if you can find a log that indicates the problem and then build an alert from there.

index=_* *ldap*

View solution in original post

0 Karma

Esteemed Legend

Do a search like this for the timerange when it last happened and go to the Patterns tab. See if you can find a log that indicates the problem and then build an alert from there.

index=_* *ldap*

View solution in original post

0 Karma

Ultra Champion

Perfect - thank you.

0 Karma