Security

How can I create alerts based on this app data received using API

aruncp333
Explorer

How can I create alerts based on this app data received using API? How this app https://splunkbase.splunk.com/app/6960 alert if my data matches with the intel feeds?

Cyble Threat Intel 

0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @aruncp333 ... this task should not any app specific. 

Simply search for the particular data and count it, save it as alert with threshold of count >0.. 

pls let us know if you got the idea or any questions.. thanks. 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...