How do you manage thousands of alert definitions, having to mass update them, disable them, deleting chunks of them, etc etc? I do this by hand. Wondering if anyone has any cool suggestions

• gmc

  1 2 0.0

  Splunk Global Monitoring Console

For just reporting/viewing health things, highly recommend the Global Monitoring Console https://github.com/annettefo/gmc. That branch is 2 years old but talk with your rep, there should be a newer version floating around and I believe also one that's cloud certified.

• security_content

  20 1,145 9.9 Python

  Splunk Security Content

  

Take a look here https://github.com/splunk/security_content All of the tools, including a yml schema for creation of a deployable savedsearches.conf

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project