https://community.splunk.com/t5/Getting-Data-In/Detect-gaps-in-Windows-Universal-forwarder-eventstrem/m-p/302018#M93531 <P>Hello,</P> <P>We have Splunk 6 running with Universal forarders on all our Windows servers. The forwarders are used to transfer,a subsect as configured in inputs.conf of the Windows TA, to the indexers (a cluster of 2 indexers) How can I see if there have been gaps in the data forwarderd to the indexers? </P> <P>Thanks in advance!<BR /> Coen</P> Thu, 11 Jan 2018 13:14:29 GMT coenvandijk 2018-01-11T13:14:29Z https://community.splunk.com/t5/Getting-Data-In/Detect-gaps-in-Windows-Universal-forwarder-eventstrem/m-p/302018#M93531 <P>Hello,</P> <P>We have Splunk 6 running with Universal forarders on all our Windows servers. The forwarders are used to transfer,a subsect as configured in inputs.conf of the Windows TA, to the indexers (a cluster of 2 indexers) How can I see if there have been gaps in the data forwarderd to the indexers? </P> <P>Thanks in advance!<BR /> Coen</P> Thu, 11 Jan 2018 13:14:29 GMT https://community.splunk.com/t5/Getting-Data-In/Detect-gaps-in-Windows-Universal-forwarder-eventstrem/m-p/302018#M93531 coenvandijk 2018-01-11T13:14:29Z https://community.splunk.com/t5/Getting-Data-In/Detect-gaps-in-Windows-Universal-forwarder-eventstrem/m-p/302019#M93532 <P>Take a look at MetaWoot <A href="https://splunkbase.splunk.com/app/2949/">https://splunkbase.splunk.com/app/2949/</A><BR /> It will give you a high degree of confidence in which of your sources are (or are not) working!</P> Thu, 11 Jan 2018 13:27:35 GMT https://community.splunk.com/t5/Getting-Data-In/Detect-gaps-in-Windows-Universal-forwarder-eventstrem/m-p/302019#M93532 nickhills 2018-01-11T13:27:35Z