Alerting

Alert notification in splunk ?

sahil_singh
Explorer

Is there a provision in splunk for notification of alerts in case of the switch or the port is up or down through which the events are generated in the network ?

For eg in the case of firewall notifications, an immediate alert is generated is there is some malicious behavior is suspected.

Does splunk offers the provision for the alerts to be generated and handled. More so, a provision for reports on it is there ?

1 Solution

jbsplunk
Splunk Employee
Splunk Employee

Yes, you can set up saved searches or real time searches to look for a set of criteria, and when the criteria is met, you can configure Splunk to send you an email. To see a description of alerting and instructions for it's configuration, please see:

http://docs.splunk.com/Documentation/Splunk/latest/Admin/howdoesalertingworkinSplunk

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

Yes, you can set up saved searches or real time searches to look for a set of criteria, and when the criteria is met, you can configure Splunk to send you an email. To see a description of alerting and instructions for it's configuration, please see:

http://docs.splunk.com/Documentation/Splunk/latest/Admin/howdoesalertingworkinSplunk

Get Updates on the Splunk Community!

Synthetic Monitoring: Not your Grandma’s Polyester! Tech Talk: DevOps Edition

Register today and join TekStream on Tuesday, February 28 at 11am PT/2pm ET for a demonstration of Splunk ...

Instrumenting Java Websocket Messaging

Instrumenting Java Websocket MessagingThis article is a code-based discussion of passing OpenTelemetry trace ...

Announcing General Availability of Splunk Incident Intelligence!

Digital transformation is real! Across industries, companies big and small are going through rapid digital ...