What information is needed to create a detector?

Creating a detector in Splunk Observability involves:

1) selecting the Alert Signal (metric or event stream),

2) defining the Alert Condition (threshold, absence, etc.) and related Alert Settings (severity, window),

3) composing the Alert Message, and

4) designating Alert Recipients. These five elements map directly to option C.

A. Uses “Alert Status”; detectors are built from a signal, not a pre-existing status.

B. “Alert Criteria” is imprecise; docs use “Condition”.

D. “Alert Meaning” is not a configuration item; “Signal” is missing.

1. Splunk Observability Cloud Docs, “Create a detector”, Steps 1-5, v2024-01-12 (docs.splunk.com/Observability/alerts/detectors.html)

2. Stanford CS-X410 “Cloud Monitoring with Splunk” course notes, Week 4, page 7 “Detector elements”