Filtering out NFS mount

[solution88]

Hello,

Splunk is integrated into our monitoring system. AWS EC2 sends information to Splunk then Splunk will send alert to the monitoring system.

Currently we have an issue with NFS drive. When a low disk space alert comes in, we received multiple low disk space from other NFS mount. Is there a way to filter out other NFS? And Splunk will only send alert about root drive low disk space to our monitoring system.

Thanks,

[adonio]

yes there is,
please share some more information.
what is the search that generates current alert? how does the data looks like?
do you use alert throttling? what is the anticipated result?