Would anyone be interested in an alert script which provided "universal" functionality?
If this is something you or your enterprise is interested in, please comment. Specifically, are you interested, AND would you be willing to pay a nominal fee for it?
You no longer need to write/maintain scripts for each alert, or group of alerts..
A single script which:
- sends alerts via any/all industry standard and/or 3rd party systems. Currently:
- SNMP, SYSLOG, EMAIL, SMS, OPSGENIE
- Other 3rd party systems with standard APIs can be easily integrated by the developer
- sends configurable/standardized content from alert arguments and/or search results
- allows the user to customize the content and destination(s) for each alert
- can be duplicated and use different configurations for each instance
- log all of it's activity so that alert generation was audit-able
- can run locally on the splunk search head or on another server to offload processing
If any of this sounds too good to be true, it's not. The script is currently under beta test and will be available in the coming weeks. If you are interested in obtaining this script as soon as it is available, please let me know and I'll be happy to send the documentation directly to you which provides greater detail into it's functionality and flexibility.
Thanks for your feedback.
