All,
Can someone talk to me about how Splunk want's the term "severity" used?
Should I be logging out my errors using Splunk's CIM value severity from my app for the best compatibility with Splunk ES/PCI/ITS? Or, should I be using my own and severity is generated in those Apps on their own?
thanks,
↧