Alerting

How to get an alert whenever anyone updates test.csv lookup table?

Seeker
Explorer

Whenever anyone updates test.csv Lookup table I want to get an alert.

Note: The update is done via Lookup editor and *Save Lookup* button is clicked.

Labels (1)
0 Karma

Seeker
Explorer

Thanks for your response. I read in the documentation fschange was deprecated in the version 5 and I am using Splunk Enterprise version 8.1.5.

Can you please suggest an alternate solution?

I'd appreciate your help.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

fschange is deprecated, but still works. I know of no alternative.

---
If this reply helps you, Karma would be appreciated.

richgalloway
SplunkTrust
SplunkTrust

I'd look into setting up an fschange input on the lookup file and define an alert to trigger when an event is received from the input.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...