General Information¶
Pointers for Troubleshooting¶
- This alert will get triggered if the mule application named "kaas-audit-log-forwarder-v1" stops sending the "appHealth : OK" events.
- Check if the mule application has been stopped or if it is not functioning as expected.
- Check if there is an issue on the MAP platform in general (connectivity to CORP does NOT impact this alert).
Link to the Alert on Splunk¶
KaaS - Audit Log Forwarder App - Alive Status
Search Query¶
KaaS - Audit Log Forwarder App - Alive Status.txt
Alert Configurations¶
Owner : UAGK (KaaSOpsAdmin does not have access to the index that is being queried 'map_cs_prd_index')
Settings - Alert Type : Scheduled - Schedule : Run on Cron Schedule - Cron Expression : */5 * * * * (every 5 minutes) - Time Range : Last 15 minutes - Expires : 90 days
Trigger Conditions - Trigger alert when : Number of Results - is less than '15' - Trigger : Once - Throttle : Yes - Suppress triggering for : 60 minutes
Trigger Actions
- Add to Triggered Alerts
- Severity : Medium
- Send email
- To : KAASOPS@novonordisk.com
- Priority : High
- Subject : Splunk Alert: $name$
- Message : The alert condition for '$name$' was triggered. KaaS Wiki - Platform Alerts : https://dev.azure.com/novonordiskit/KaaS%20(Kafka%20as%20a%20Service)/_wiki/wikis/Kafka-as-a-Service-Wiki-Homepage/210414/Platform-Alerts
- Include :
- Link to Alert
- Link to Results
- Trigger Condition
- Allow Empty Attachments
- Type : HTML & Plain Text