Filtering out NFS mount

solution88 · ‎09-11-2018

Hello,

Splunk is integrated into our monitoring system. AWS EC2 sends information to Splunk then Splunk will send alert to the monitoring system.

Currently we have an issue with NFS drive. When a low disk space alert comes in, we received multiple low disk space from other NFS mount. Is there a way to filter out other NFS? And Splunk will only send alert about root drive low disk space to our monitoring system.

Thanks,

adonio · ‎09-11-2018

yes there is,
please share some more information.
what is the search that generates current alert? how does the data looks like?
do you use alert throttling? what is the anticipated result?

Filtering out NFS mount

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform

Join the Conversation

Filtering out NFS mount

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent

Level Up Your Workflow: Mastering Splunk Cloud Management via Terraform