Is there any alert if data integrity is compromised ?


We have enabled the data Integrity check for the indexes that we have on our splunk environment. As per the documentation we can execute the integrity check command from cli and see if there is any violation of the integrity for that index. Is there any alert that we can set up that automatically checks the integrity and notifies the users if something is changed ?


0 Karma


Hello arber,

Splunk hasn't yet developped any automated alerting with the new Dataintegrity feature.
We deployed a script on our indexers that check the integrity of all indexes with the splunk cli command.
This script is called by inputs.conf once a day.
We have an alert monitoring this input.

To the best of my knowledge this is currently the only way of alerting when Dataintegrity checks fail.

Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...