Security

How can I create alerts based on this app data received using API

aruncp333
Explorer

How can I create alerts based on this app data received using API? How this app https://splunkbase.splunk.com/app/6960 alert if my data matches with the intel feeds?

Cyble Threat Intel 

0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @aruncp333 ... this task should not any app specific. 

Simply search for the particular data and count it, save it as alert with threshold of count >0.. 

pls let us know if you got the idea or any questions.. thanks. 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma
Get Updates on the Splunk Community!

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...