Splunk Search

Alert set for count in range

cbiraris
Path Finder

Hi Team,

I am trying to setup an alert if the count of errors are in range of  between 10 to19(more then 10 and less than 19). 

for example:

index=abc sourcetype=xyz "errors"
only if count >= 10 AND count <=19, should only trigger alert.


please help

thank you




Labels (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| where count >= 10 AND count <=19

Then trigger your alert if there are any results

0 Karma

cbiraris
Path Finder

Thank you its working

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...