Alerting

Is it possible to make a Historical Alert Dashboard or Report of AWS rules?

Hegemon1984
Engager

Hello,

I have 16 AWS rules and would like to make a dashboard/report of the frequency they fire week/month/year. Is this possible in an efficient manner?

Thank You

0 Karma
1 Solution

Hegemon1984
Engager

Figured out the answer to my own question.

 

index=notable search_name= *AWS* |stats count by search_name |sort - count

View solution in original post

0 Karma

Hegemon1984
Engager

Figured out the answer to my own question.

 

index=notable search_name= *AWS* |stats count by search_name |sort - count
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...