Monitoring Splunk

Splunk Broken Hosts App Alerting False Postives

NightShark
Path Finder

Greetings Fellow Splunkers,

We have been recieving false reports claiming certain index, sourcetype and ip combinations that havent been communicating for a long time, however when checking over we do actually seem to be recieving a healthy amount of logs from the combination of fields mentionned above.

I have seen this in 2 other organizations aswell, what are some recommended fixes for this issue? has anyone else come across the same problem?

Thanks,

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>