This app provides a one-stop-shop to monitor the activity of your indices and ensure they are receiving logs as expected. It also includes a saved alert that will trigger when one of your common indices has been silent for a given period of time (it is disabled by default). The alert can easily be translated into a Notable if you utilize Enterprise Security in your environment.
(1)
Categories
Created By
Type
Downloads
Licensing
Splunk Answers
Resources