Splunk Search

How to add business value other than alert?

rkishoreqa
Communicator

Hi team, 

 

We are logging the File copy logs, Application logs into Splunk and using Splunk alerting for file not copied scenarios and connectivity issues.  Along with this alerting we want to take actions based on the connectivity issues/ file not copied scenarios.  So can anyone please share me any scenarios along with examples.    In brief do you have any feature to take action based on the logs from the Splunk. 

Also please let me know features of Splunk other than alerting to add the business value. 

 

Thanks in advance, 

 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...