https://community.splunk.com/t5/Getting-Data-In/create-notable-event-for-missing-forwarders/m-p/543713#M90764 <P>Hi,<BR />Yes, but I want to find a way to forward MC Missing Forwarders Alerts to ES as a Notable Event, not creating a new Correlation search.</P> Sun, 14 Mar 2021 05:12:18 GMT jg91 2021-03-14T05:12:18Z https://community.splunk.com/t5/Getting-Data-In/create-notable-event-for-missing-forwarders/m-p/543711#M90762 <P>Hi, is there any solution to create a notable event for missing forwarders? Now missing forwarders generate an alert on Monitoring Console, which runs on a separate Splunk instance than ES.</P><P>&nbsp;</P> Sun, 14 Mar 2021 04:49:27 GMT https://community.splunk.com/t5/Getting-Data-In/create-notable-event-for-missing-forwarders/m-p/543711#M90762 jg91 2021-03-14T04:49:27Z https://community.splunk.com/t5/Getting-Data-In/create-notable-event-for-missing-forwarders/m-p/543712#M90763 <P>Hi,</P><P>You can write a correlation search for missing forwarders and select the alert type as a notable event.And you will get all the missing forwarder alerts as a notable event.</P> Sun, 14 Mar 2021 04:56:32 GMT https://community.splunk.com/t5/Getting-Data-In/create-notable-event-for-missing-forwarders/m-p/543712#M90763 Vardhan 2021-03-14T04:56:32Z https://community.splunk.com/t5/Getting-Data-In/create-notable-event-for-missing-forwarders/m-p/543713#M90764 <P>Hi,<BR />Yes, but I want to find a way to forward MC Missing Forwarders Alerts to ES as a Notable Event, not creating a new Correlation search.</P> Sun, 14 Mar 2021 05:12:18 GMT https://community.splunk.com/t5/Getting-Data-In/create-notable-event-for-missing-forwarders/m-p/543713#M90764 jg91 2021-03-14T05:12:18Z