I have a dashboard for all SSL certifications. I'd like to setup few alerts for renewal reminds from Splunk. My current query is as shown below:
|Search validdays<60 |table hostname,validddays,issuer,commonName
My custom trigger condition is: search validdays="*" AND count<273
When I run this I am seeing results but no alert is triggered nor do I receive any email. please assist
I was able to self resolve this query! Thanks for taking a look.
@Khanu89 - Can you please specify the details of fields you have in your data? And also how you are writing the condition you mentioned? What is the count field in the condition?