| Even thought it took me a while, I figured out how to get an alert to run a script. I came across with some problems ... 0 2 | 0 | 2 | ||
| Hello guys I got a question, How to determine when there is a program installed on Windows Server 2008? I look at my... by nickbijmoer Path Finder in Alerting 01-21-2017 0 1 | 0 | 1 | ||
| Hi All, I am seeking some thoughts to implement data assurance. I wish to build an alerting mechanism for following... by indianhans Engager in Alerting 01-20-2017 0 3 | 0 | 3 | ||
| Query: index=xyz | bin span=10m _time | stats count as Count by _time Trigger condition: where Count > 0 My al... 0 1 | 0 | 1 | ||
| I have the below search set for an alert which displays all the count and i have an alert schedule with a condition t... 0 3 | 0 | 3 | ||
| I need to create an alert that will trigger only if both conditions are met....so if results of search A are over 200... 0 1 | 0 | 1 | ||
| For the apps I deploy to clients, I want to be alerted (by e-mail) whenever, for example, "inputs.conf" is changed. f... 0 2 | 0 | 2 | ||
| Hi, All of our alerts are not working after the upgrade to Splunk 6.5.1 from 6.3.0. In the scheduler.log I have thi... by levent_kurt Explorer in Alerting 01-10-2017 1 8 | 1 | 8 | ||
| I have a DevOps test instance of splunk with some reports (that I run manually ad hoc) and two scheduled alerts. I k... by packet_hunter Contributor in Alerting 01-09-2017 0 9 | 0 | 9 | ||
| I'm working on some alert scripts, and trying to get debugging information out of them. I can't figure out where std... 0 6 | 0 | 6 | ||
| I am able to run my script resetmcvpn.sh with no issues from the ubuntu command line. The code below: #!/usr/bin/exp... by antlefebvre Communicator in Alerting 01-06-2017 2 2 | 2 | 2 | ||
| I have seen this question a few times but have not seen a solution that works. I just had an issue where 1 of my 2 c... by mvasquez21 Path Finder in Alerting 01-06-2017 0 3 | 0 | 3 | ||
| I created an alert with this SPL( index=_audit action=edit OR action=create OR action=delete OR action=change| stats... 0 2 | 0 | 2 | ||
| in my environment, there are four admins. now i want to create an alert if anyone did any changes on GUI or internal.... 0 4 | 0 | 4 | ||
| I'm trying to be less dependent on automated regex and learn more about doing my own regex for field extractions. I ... by richnsanders_70 Path Finder in Alerting 12-29-2016 0 4 | 0 | 4 | ||
| I have very large number (over hundred) of scheduled searches done every minute. Some have alert actions to send an e... 0 2 | 0 | 2 | ||
| Hi, I have set up a Alert as such index=rest because the offer is shutoff. partnerId="*" host="*-prd-rst*" | stats ... by arunsubram Explorer in Alerting 12-22-2016 0 2 | 0 | 2 | ||
| Hello - I have an alert that I want to 'suppress' / 'turn off' for 30 min a week. Every Sunday a connection is dropp... 0 6 | 0 | 6 | ||
| So I am setting up Splunk alerting. I want to devise an alert such that it monitors hosts. Specifically if nothing ... 0 1 | 0 | 1 | ||
| Hi at all, I'm passing from a single Search Head (with four Indexers) to a Search Head Cluster. I have three Search ... 0 2 | 0 | 2 | ||
| Hi at all, I have a Search Head Cluster with 3 SHs that sends alerts to an external system based on IBM NetCool. Clus... 0 1 | 0 | 1 | ||
| Hello, I've search around and haven't found an answer on Splunk answers so maybe someone can help answer or give me a... 0 3 | 0 | 3 | ||
| Hello guys, I want to generate an alert when my netflow count is something like 10% above the usual average count. I... by nickbijmoer Path Finder in Alerting 12-15-2016 0 2 | 0 | 2 | ||
| Hello all, I can't seem to get Powershell or batch script to "successfully" execute. When I attempt to run a batch,... 0 1 | 0 | 1 | ||
| I am using the search below to determine the account locked out - It works fine but as result I received more than a ... 0 3 | 0 | 3 |