Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Extracting a field and sending alert

$
0
0
Hi, I have the below event for which I need to get an alert whenever the event occurs and get the version of the file . [2017-03-13T16:16:07-04:00] INFO: Processing remote_file[/opt/chef/cache/openupf-abdirect-web-**17.03.00.01-20170313.032310-34-config.tar**] action create (AB_CD_Appserver::deploy line 21) The highlighted part is the version of the file which I need to get in the email. I created a field transformation and get an alert mentioning the version. Thanks Rohit

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>