Splunk Enterprise

How to get Splunk alerting for Admins during on-call for free?

Path Finder

Hello Splunk Admins,

What solutions you use to get notified on mobile about internal Splunk issues in out of office hours?
I mean when e.g. splunkd goes down on indexers, data is not indexed anymore for any reason etc.
We need something free of charge. There is no other team except of us who needs to be notified about the issue.
I have heard about Splunk On Call solution but seems to be a bit complex. Anyone having any experience with it?
Hope to get some inspirations

Many greetings,

Labels (2)
Tags (1)
0 Karma

Splunk Employee
Splunk Employee

(Full disclaimer: I'm the product manager for Splunk Mobile)


Splunk Mobile is a free app for Android or iOS that allows you to send push notifications to your phone based on the alerts in Enterprise. We actually had a user that we featured in our breakout session this year (PLA1488A) at .conf22 who used Mobile alerts to monitor his indexers, and was able to catch them going down on a weekend because of Splunk Mobile. 

You can configure alerts to be sent to a specific role, so if you already have a Splunk role setup for the folks on your team, you can send alerts to that role to receive them on mobile.


Documentation on getting started with Splunk Mobile is here:  https://docs.splunk.com/Documentation/Alerts/2.31.1/Alerts/GetStarted

Documentation on alerts specifically is here: https://docs.splunk.com/Documentation/Alerts/2.31.1/Alerts/SendAlerts

An overview of what Splunk Mobile looks like is here: https://www.youtube.com/watch?v=FOHwU00IVUE&ab_channel=Splunk

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...