Alerting

Realtime status of devices | Cancel Alert with Different Alert

Becherer
Explorer

I have a system that is sending alerts on when protection of a device is disabled and then reenabled. I would like to show pictures of desktop like what I have provided with a "RED or GREEN" dot next to the device. When an event comes in stating the "protection has been disabled", I would like for the dot to show "RED" and whenever the event of "Device Reenabled" comes through, I would like for it to change the color to "GREEN".

I guess this would start by a report and then a dashboard?
alt text
link text

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...