Share a Tip

Instrumentation Detection Prority

Sam_Fowler
Engager

When creating detection rules such as Business Transaction, Service Endpoint or Backend Detection rules, the priorities are always evaluated as highest number first.

As a top tip, always set these priorities in increments of 5, or even 10! This way, if later you choose to add a new rule between existing ones, it will be easy to do.

You won't have to reprioritise your rules to make room, but you may have to if you'd chosen to increment by 1.

Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...