Alerting

Alert notification in splunk ?

sahil_singh
Explorer

Is there a provision in splunk for notification of alerts in case of the switch or the port is up or down through which the events are generated in the network ?

For eg in the case of firewall notifications, an immediate alert is generated is there is some malicious behavior is suspected.

Does splunk offers the provision for the alerts to be generated and handled. More so, a provision for reports on it is there ?

1 Solution

jbsplunk
Splunk Employee
Splunk Employee

Yes, you can set up saved searches or real time searches to look for a set of criteria, and when the criteria is met, you can configure Splunk to send you an email. To see a description of alerting and instructions for it's configuration, please see:

http://docs.splunk.com/Documentation/Splunk/latest/Admin/howdoesalertingworkinSplunk

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

Yes, you can set up saved searches or real time searches to look for a set of criteria, and when the criteria is met, you can configure Splunk to send you an email. To see a description of alerting and instructions for it's configuration, please see:

http://docs.splunk.com/Documentation/Splunk/latest/Admin/howdoesalertingworkinSplunk

Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...