Scenario:
The system creates a line in a log file saying that a file has been uploaded. This directory is indexed. It is searchable in Splunk>Enterprise using "file has uploaded".
I tested the end point with a post and it takes information. I tested the real time search and it shows a new record each time the keyword is entered in the file.
Splunk is not hitting the endpoint.
How can I debug this?
Why would none of our triggers show up on the trigger page?
Configuration:
Alert type is real time
Trigger alert when is Per-Result
When Triggered
Add to triggered alerts severity high
Webhook http://jvm.net/webhookbucket
Search string: file has uploaded
