Alerting

Forwarder alerting via deplyment monitor

tevgey23
Explorer

Is there a way to set up an alert through the deployment monitor (or anywhere), to generate an alert when a forwarder stops monitoring a host or sending data ?

0 Karma
1 Solution

kristian_kolb
Ultra Champion

This functionality is already built into the Deployment Monitor. Scroll down on the first (home) page of the Deployment Monitor. There you will see information regarding Forwarder Warnings, and there is a link for configuring alerting as well.

Hope this helps,

Kristian

View solution in original post

kristian_kolb
Ultra Champion

This functionality is already built into the Deployment Monitor. Scroll down on the first (home) page of the Deployment Monitor. There you will see information regarding Forwarder Warnings, and there is a link for configuring alerting as well.

Hope this helps,

Kristian

tevgey23
Explorer

Great thank you

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...