All Apps and Add-ons

server class/apps gets updated by deployment server

mailtosnsolutio
Explorer

Hello Splunkers,

Hope Everyone doing good.

I am for spl to create alert whenever a server class/apps gets updated by deployment server?

Could anyone please help ??

0 Karma

adonio
SplunkTrust
SplunkTrust

start here:
index=_internal component=PackageDownloadRestHandler host=* app=<YourAppNameHere>

or here:
index=_internal sourcetype=splunkd action=install

run in verbose and see how the events look like and write your own logic to answer the questions you care about

hope it helps

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!