Solved

How to use Splunk to find solution for a event alert?

Posted on 2013-06-01
1
501 Views
Last Modified: 2013-06-17
I am studying event log mangement with Splunk. After i find a event alert, how can i find some advise or solution for fix that alert? It seems there is no button for further advise from the event code search screen, as the attached screenshot.

Or is there any other tools can prodive advise for fix event alerts from Windows server and some network devices syslog?
Many thanks.
Splunk-Event.png
0
Comment
Question by:dickchan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 78

Accepted Solution

by:
arnold earned 500 total points
ID: 39213673
ESENT is the application that generated the event
Each application has its own event and meaning should be included as part of the message.

The fixing part is that you have to determine  whether it is a common event that needs no fixing as it is  informational only.
0

Featured Post

Are Your IoT Devices Out to Get You?

IoT business is booming, with manufacturers connecting any and every “thing” to the Internet. But as pressure grows to release new products faster and faster, we’re all left to wonder: is security a priority? Join our webinar on June 29th for the answer.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A procedure for exporting installed hotfix details of remote computers using powershell
A safe way to clean winsxs folder from your windows server 2008 R2 editions
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question