I need to write a query for creating an alert whenever there is message in the "Splunk bar" message tab.
Please help me with this.
am clear about the process of creating an alert. Could you please help me in writing the splunk query whenever we get a pop up message in the splunk message tab?
This doesnt meet my requirement.
My issue here is For example: in the message tab some warning or error message like "indexer is down or too many streamings to the target" is popped out then the same thing has to be triggered as an alert whenever there is a message pop up in splunk bar.