https://community.splunk.com/t5/Getting-Data-In/Logs-sending-being-cutoff/m-p/521598#M88125 <P>Hello,</P><P>I have had an issue where specifically the firewall logs were cutoff for about 5 hours and then reconnected and started logging again in Splunk.</P><P>The syslog server responsible is actually running and sending data, but how can I troubleshoot why the logs were not sent during that specific time period ?</P><P>I am new to troubleshooting indexers etc. any help is appreciaited.</P><P>Regards,</P> Sat, 26 Sep 2020 08:27:35 GMT STU3 2020-09-26T08:27:35Z https://community.splunk.com/t5/Getting-Data-In/Logs-sending-being-cutoff/m-p/521598#M88125 <P>Hello,</P><P>I have had an issue where specifically the firewall logs were cutoff for about 5 hours and then reconnected and started logging again in Splunk.</P><P>The syslog server responsible is actually running and sending data, but how can I troubleshoot why the logs were not sent during that specific time period ?</P><P>I am new to troubleshooting indexers etc. any help is appreciaited.</P><P>Regards,</P> Sat, 26 Sep 2020 08:27:35 GMT https://community.splunk.com/t5/Getting-Data-In/Logs-sending-being-cutoff/m-p/521598#M88125 STU3 2020-09-26T08:27:35Z https://community.splunk.com/t5/Getting-Data-In/Logs-sending-being-cutoff/m-p/521599#M88126 <P>PS by "syslog server responsible" I meant the firewall management software responsible was logging all the events at the time of cutoff, might have used a wrong term there</P> Sat, 26 Sep 2020 08:30:13 GMT https://community.splunk.com/t5/Getting-Data-In/Logs-sending-being-cutoff/m-p/521599#M88126 STU3 2020-09-26T08:30:13Z