How to write a search to trigger an alert email wh...

jward6004 · ‎07-19-2016

I'm looking for a search that will check for violations of our license quota running on a daily schedule. If there is a violation, I would like an email to be generated.

sundareshr · ‎07-19-2016

You can set platform alerts in the Distribution Management Console

http://docs.splunk.com/Documentation/Splunk/6.4.2/DMC/Platformalerts

How to write a search to trigger an alert email when we have exceeded our daily license (violation)?

Enterprise Security Content Update (ESCU) | New Releases

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

Index This | What are the 12 Days of Splunk-mas?