Splunk Search

Create a table that contains 'ALERTS'. User will verify the alerts, click on the specific event and the particular event will disappear.

marvinlee93
Explorer

Hi all,

I would like to create a table that contains 3 scenarios. ( Low, High, Severe)
The table will keep appending fields when these scenarios are met.

I would like to make this table more interactive where a user can click on a particular field to verify the 'ALERT' and the particular field will disappear thereafter. (Something like a checklist that refreshes)

Any idea how to do this?

Tags (1)
0 Karma
1 Solution

dkeck
Influencer

You might want to have a look at Enterprise Security, sounds like Incedent Review for me.

View solution in original post

0 Karma

dkeck
Influencer

You might want to have a look at Enterprise Security, sounds like Incedent Review for me.

View solution in original post

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Or less pricey and whale-sized, Alert Manager: https://splunkbase.splunk.com/app/2665/

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.