is there a way to alert when json data changes?
i want to track changes for a variety of apis results/output that should stay static. i want to know when they change with an email. my thought is to daily grab the api data via powershell and post it to splunk via http collector or flat file input via forwarder.
is it possible to have splunk alert on change, and a plus would be providing the key/value pair that changed.