I was wondering how can I use Splunk to monitor and notify me if a disk or volume that should be mounted is not mounted. We are looking to implement this within a Linux environment.
One way could include the use of a lookup table containing all possible mount points and the use of this app https://splunkbase.splunk.com/app/1553/ to compare against.
It could also be done with some script that runs some df and cat /etc/fstab and prints out the difference into a log which is monitored by Splunk.
You see, there are multiple options to achieve the goal.
