Splunk Search

Detect spikes in log activity

yk010123
Path Finder

I am trying to create an alert if Splunk detect anomalies in my log creation rate.

For example, my application normally generates about n logs per second, but I would like to be alerted if there is a n% increment in my logging compared to my historic volume over time.

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Index This | What’s a riddle wrapped in an enigma?

September 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

BORE at .conf25

Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...