alert when json data changes

[gdavid]

is there a way to alert when json data changes? 

i want to track changes for a variety of apis results/output that should stay static. i want to know when they change with an email. my thought is to daily grab the api data via powershell and post it to splunk via http collector or flat file input via forwarder.

is it possible to have splunk alert on change, and a plus would be providing the key/value pair that changed. 

thanks

Gd.

[richgalloway]

In general, if you can search for it in Splunk then you can alert on it.  I suggest you create a test index and add your JSON data to it.  Then experiment with searches to find when data changes.  If you have problems with that, you can post new, specific questions.