Reporting
Highlighted

how i can send email when snort splunk catch a alert

New Member

then i installed a splunk with splunk snort,i want send all alert or when a alert genrated to my boxemail gmail how i can do that

ps:i have a mta ssmtp configured with gmail

sorry for mu english 🙂

Tags (4)
0 Karma
Highlighted

Re: how i can send email when snort splunk catch a alert

Legend

Build your search for which events you want to receive an alert for. For instance if you just want anything that is generated by snort: use "sourcetype=snort". After that, schedule this search and create an alert from it and configure Splunk to send you an email when the alert triggers. This is excellently covered in the manual:

http://www.splunk.com/base/Documentation/latest/User/SchedulingSavedSearches

Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.