Get started

Enable the Ingest Monitoring app, select indexes to monitor, and confirm that the CIM non-compliance alert template is available.

Set up Ingest Monitoring and verify the CIM non-compliance template before you create alerts. This procedure enables monitoring and confirms that the CIM non-compliance alert template is available.

1. Sign in to your Splunk Cloud Platform instance and open the Ingest Monitoring app.
   1. Sign in with an sc_admin or admin account.
   2. Open the Ingest Monitoring app.
2. Enable monitoring.
   1. If this is your first time in the app, complete the guided setup and select the indexes you want to monitor.
   2. Select Submit.
3. Verify that the Ingest Monitoring app is set up.

   Confirm that a Data Management navigation pane appears on the left side of the app.

4. Verify that the CIM non-compliance template is available.
   1. In the app's left navigation pane, select Alerts.
   2. Select New alert rule.
   3. On the templates page, confirm that CIM non-compliance template appears as an option.

The app collects ingestion metrics and enables the alert system. The CIM non-compliance template is available when you create an alert rule.