Alerting

Is there any alert if data integrity is compromised ?

arber
Communicator

Hi,
We have enabled the data Integrity check for the indexes that we have on our splunk environment. As per the documentation we can execute the integrity check command from cli and see if there is any violation of the integrity for that index. Is there any alert that we can set up that automatically checks the integrity and notifies the users if something is changed ?

Thanks

0 Karma

jdumont33
Explorer

Hello arber,

Splunk hasn't yet developped any automated alerting with the new Dataintegrity feature.
We deployed a script on our indexers that check the integrity of all indexes with the splunk cli command.
This script is called by inputs.conf once a day.
We have an alert monitoring this input.

To the best of my knowledge this is currently the only way of alerting when Dataintegrity checks fail.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...