Alerting

What would be 7-10 Critical Alerts Admins can setup on All Splunk / ES servers to be alerted about ?

SamHTexas
Builder

What would be 7-10 Critical Alerts Admins can setup on All Splunk / ES servers to be alerted about ? During Daily checks.

Labels (1)
Tags (1)
0 Karma

gjanders
SplunkTrust
SplunkTrust

I think this is going to vary a lot depending on your environment.

 

In alerts for splunk admins https://splunkbase.splunk.com/app/3796/ I have high in the description for anything I considered very important and a low chance of false alarm.

 

The more recent alerts and reports are used to find issues and tend to summarize more where the older alerts are very specific 

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...