i am new to splunk and trying to figure where in the tool i can write my own rule to trigger an event? please advise. Thanks.
Here's a good eLearning on this subject http://www.splunk.com/view/SP-CAAAGYG