SplunkBase Applications 2010-02-09T14:32:19+00:00 http://www.splunkbase.com/api/apps/entries/?type=Alerts 24 10 1 Audible Alerts using Nabaztag:Tag (Wifi Rabbit) 2009-10-15T21:39:58+00:00 http://www.splunkbase.com/api/apps/entries/Audible+Alerts+using+Nabaztag%3ATag+%28Wifi+Rabbit%29 ndoshi 146 ndoshi nimish@splunk.com 2009-04-10T19:18:03+00:00 2009-10-15T21:39:58+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Audible+Alerts+using+Nabaztag%3ATag+%28Wifi+Rabbit%29 1.0.1 Integration Alerts No Data 0 1 http://www.splunkbase.com/apps/Audible+Alerts+using+Nabaztag%3ATag+%28Wifi+Rabbit%29 http://www.splunkbase.com/apps:screenshot/original/Audible+Alerts+using+Nabaztag%3ATag+%28Wifi+Rabbit%29/icon.jpg 36 36 0 0 0 0 0 0 3.0.0 4.999.999 This application is an example of sending audible alerts to a device using the REST API of the device. The idea is that there are times when you would want to receive alerts beyond the usual text based alerts, especially when you may be in a remote location. This script runs as a scripted alert in Splunk to send an audible alert to a Nabaztag:Tag (robot rabbit from http://www.violet.net/) whenever the alert conditions are met. It uses Violet's REST API to send the message. Currently, the script uses daily, weekday and weekend to control what days the email alert should be sent. It also provides start and end hours when the alert should be active. Installation: Use tar zxvf to uncompress and untar the distribution. Then, read the README for further instructions. Requirements: Wireless Router and Nabaztag:Tag Use Python Mail for Scripted Alerts 2009-10-15T21:03:42+00:00 http://www.splunkbase.com/api/apps/entries/Use+Python+Mail+for+Scripted+Alerts ndoshi 393 ndoshi nimish@splunk.com 2009-03-03T20:10:07+00:00 2009-10-15T21:03:42+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Use+Python+Mail+for+Scripted+Alerts 1.0.1 Custom Processing Alerts No Data 0 1 http://www.splunkbase.com/apps/Use+Python+Mail+for+Scripted+Alerts http://www.splunkbase.com/apps:screenshot/original/Use+Python+Mail+for+Scripted+Alerts/icon.jpg 36 36 0 0 0 0 0 0 3.0.0 4.999.999 This script runs as a scripted alert in Splunk to send mail to recipients whenever the alert conditions are met. It is similar in concept to the Javamail application available on Splunkbase. It uses Python to send the message. The intent is to provide a framework to control when email should be sent. Currently, the script uses Daily, Weekday, and Weekend to control what days the email alert should be sent. With this in mind the included Python program can be modified to also include what hours of the day email should be sent. Installation: Use tar zxvf to uncompress and untar the distribution and read the README.txt. Use Javamail for Scripted Alerts 2009-10-15T20:59:01+00:00 http://www.splunkbase.com/api/apps/entries/Use+Javamail+for+Scripted+Alerts ndoshi 311 ndoshi nimish@splunk.com 2009-01-26T23:42:50+00:00 2009-10-15T20:59:01+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Use+Javamail+for+Scripted+Alerts 1.0.2 Integration Alerts No Data 0 1 http://www.splunkbase.com/apps/Use+Javamail+for+Scripted+Alerts http://www.splunkbase.com/apps:screenshot/original/Use+Javamail+for+Scripted+Alerts/icon.jpg 36 36 0 0 0 0 0 0 3.0.0 4.999.999 This script runs as a scripted alert in Splunk to send mail to recipients whenever the alert conditions are met. It uses JavaMail to send the message. The intent is to provide a framework to control when email should be sent. Currently, the script uses Daily, Weekday, and Weekend to control what days the email alert should be sent. With this in mind the included Java program can be modified to also include what hours of the day email should be sent. The included code uses a US Local, which should be changed to the country of your choice. You can also use the full power of Javamail to send multi-part messages and attachments. Installation: Use tar zxvf to uncompress and untar the file and follow the instructions in the README. You can also modify the script to run on Windows. Nagios sevice check to monitor the size of daily index 2009-05-06T19:07:50+00:00 http://www.splunkbase.com/api/apps/entries/Nagios+sevice+check+to+monitor+the+size+of+daily+index ckotil 102 ckotil 2009-05-06T19:07:50+00:00 2009-05-06T19:07:50+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Nagios+sevice+check+to+monitor+the+size+of+daily+index 1.0 Reports Alerts No Data 1 0 http://www.splunkbase.com/apps/Nagios+sevice+check+to+monitor+the+size+of+daily+index 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999 This Nagios service check allows a user to define a threshold in amount of bytes that will raise an alarm when the splunk daily index surpasses this amount. Splunk for Double-Take 2009-03-24T22:56:03+00:00 http://www.splunkbase.com/api/apps/entries/Splunk+for+Double-Take kordless 357 kordless 2009-03-24T21:33:50+00:00 2009-03-24T22:56:03+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Splunk+for+Double-Take 1.1 Searches Search Commands Reports Inputs Fields Event Types Event Actions Alerts No Data 0 1 http://www.splunkbase.com/apps/Splunk+for+Double-Take 0 0 http://www.splunkbase.com/apps:screenshot/original/Splunk+for+Double-Take/screenshot.jpg 120 73 http://www.splunkbase.com/apps:screenshot/scaled/Splunk+for+Double-Take/screenshot.jpg 640 389 http://www.splunkbase.com/apps:screenshot/thumb/Splunk+for+Double-Take/screenshot.jpg 118 72 3.0.0.0 3.999.999 Splunk for Double-Take, a collaborative platform, brings higher system availability, lower cost of maintaining availability, and simplified monitoring of business critical Microsoft Exchange and SQL Server environments. By adding the power of Splunk IT Search into the Double-Take offering, users can tap into the capabilities of real-time search, alerting, reporting and analysis, to aggressively and proactively ensure successful failover conditions through a broader view of their environment. Splunk for PCI for Splunk 3.x 2009-03-23T23:06:28+00:00 http://www.splunkbase.com/api/apps/entries/Splunk+for+PCI+for+Splunk+3.x Splunk 5031 Splunk 2008-01-11T00:03:07+00:00 2009-03-23T23:06:28+00:00 Email sales@splunk.com for pricing Contact Splunk For Trial http://www.splunkbase.com/apps:license/Splunk+for+PCI+for+Splunk+3.x for Splunk 3.3 and 3.4 Searches Reports Event Types Alerts 4.5 6 0 http://www.splunkbase.com/apps/Splunk+for+PCI+for+Splunk+3.x 0 0 http://www.splunkbase.com/apps:screenshot/original/Splunk+for+PCI+for+Splunk+3.x/screenshot.jpg 120 75 http://www.splunkbase.com/apps:screenshot/scaled/Splunk+for+PCI+for+Splunk+3.x/screenshot.jpg 640 400 http://www.splunkbase.com/apps:screenshot/thumb/Splunk+for+PCI+for+Splunk+3.x/screenshot.jpg 117 73 3.0.0.0 3.999.999 The Splunk PCI application offers over 57 reports, more than 91 saved searches, a dashboard, and corresponding alerts you can use to satisfy PCI requirements such as secure remote access, file integrity monitoring, secure log collection, daily log review, audit trail retention, and PCI control reporting. Splunk for Network Security 2009-03-19T20:43:50+00:00 http://www.splunkbase.com/api/apps/entries/Splunk+for+Network+Security Splunk 15206 Splunk 2008-08-25T18:29:02+00:00 2009-03-19T20:43:50+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Splunk+for+Network+Security for Splunk 3.3 and 3.4 Searches Reports Inputs Fields Event Types Alerts 2.0 3 1 http://www.splunkbase.com/apps/Splunk+for+Network+Security 0 0 http://www.splunkbase.com/apps:screenshot/original/Splunk+for+Network+Security/screenshot.jpg 86 86 http://www.splunkbase.com/apps:screenshot/scaled/Splunk+for+Network+Security/screenshot.jpg 480 480 http://www.splunkbase.com/apps:screenshot/thumb/Splunk+for+Network+Security/screenshot.jpg 73 73 3.0.0 3.999.999 The Splunk Network Security application offers a set of reports, saved searches, and dashboards, as well as corresponding alerts that you can use to monitor your firewalls, intrusion detection and prevention systems, as well as operating systems. Splunk for Change Management 2009-03-19T17:46:47+00:00 http://www.splunkbase.com/api/apps/entries/Splunk+for+Change+Management Splunk 2362 Splunk 2008-03-01T01:37:18+00:00 2009-03-19T17:46:47+00:00 Email sales@splunk.com for pricing Contact Splunk For Trial http://www.splunkbase.com/apps:license/Splunk+for+Change+Management for Splunk 3.3 and 3.4 Searches Reports Inputs Fields Event Types Event Actions Alerts 4.0 5 0 http://www.splunkbase.com/apps/Splunk+for+Change+Management 0 0 http://www.splunkbase.com/apps:screenshot/original/Splunk+for+Change+Management/screenshot.jpg 1080 1019 http://www.splunkbase.com/apps:screenshot/scaled/Splunk+for+Change+Management/screenshot.jpg 509 480 http://www.splunkbase.com/apps:screenshot/thumb/Splunk+for+Change+Management/screenshot.jpg 77 73 3.0.0.0 3.999.999 Splunk for Change Management provides predefined reports and dashboards to facilitate change auditing, change detection, change reporting, change validation and incident response based on change events, change tickets and configuration files. Nagios 3.0.6 2009-02-23T18:53:53+00:00 http://www.splunkbase.com/api/apps/entries/Nagios+3.0.6 ymiranda 5 ymiranda 2009-02-23T18:53:53+00:00 2009-02-23T18:53:53+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Nagios+3.0.6 1.0 Themes Searches Search Commands Scripted Inputs Reports Other Integration Inputs Event Types Event Actions Clients Alerts No Data 0 0 http://www.splunkbase.com/apps/Nagios+3.0.6 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999 integration fo a nagios3.0.6 xxxxxxxxxxxxxxxxxxx Sendemail (Custom) 2009-01-27T23:11:25+00:00 http://www.splunkbase.com/api/apps/entries/Sendemail+%28Custom%29 araitz 263 araitz 2009-01-27T23:11:25+00:00 2009-01-27T23:11:25+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Sendemail+%28Custom%29 1.0 Search Commands Custom Processing Alerts No Data 2 0 http://www.splunkbase.com/apps/Sendemail+%28Custom%29 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999 This custom sendemail allows email attributes (e.g. to, from, body, subject) on a per-alert basis.