https://community.splunk.com/t5/Getting-Data-In/Log-Flow-Monitoring-Solution-to-detect-broken-faulty-feeds/m-p/534718#M89713 <P>You can try Trackme app on Splunkbase. It has an option using machine learning to detect anomalies.&nbsp;</P> Mon, 04 Jan 2021 16:29:38 GMT scelikok 2021-01-04T16:29:38Z https://community.splunk.com/t5/Getting-Data-In/Log-Flow-Monitoring-Solution-to-detect-broken-faulty-feeds/m-p/534697#M89712 <P>Has anyone had success in creating monitoring in Splunk to detect broken data feeds.</P><P>We have hundreds of feeds - some have events constantly coming in, some get data just once a month - and everything in between! We require a solution which would be smart enough to detect the pattern of events and alert when there is an anomaly. An anomaly might be a drastic reduction in events or a source which was previously sending events stopping</P><P>The best we've got so far is a simple alert that fires when a sourcetype has not had data for a fixed amount of time.</P> Mon, 04 Jan 2021 13:43:57 GMT https://community.splunk.com/t5/Getting-Data-In/Log-Flow-Monitoring-Solution-to-detect-broken-faulty-feeds/m-p/534697#M89712 jonaclough 2021-01-04T13:43:57Z https://community.splunk.com/t5/Getting-Data-In/Log-Flow-Monitoring-Solution-to-detect-broken-faulty-feeds/m-p/534718#M89713 <P>You can try Trackme app on Splunkbase. It has an option using machine learning to detect anomalies.&nbsp;</P> Mon, 04 Jan 2021 16:29:38 GMT https://community.splunk.com/t5/Getting-Data-In/Log-Flow-Monitoring-Solution-to-detect-broken-faulty-feeds/m-p/534718#M89713 scelikok 2021-01-04T16:29:38Z