https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Broken-Hosts-App-Alerting-False-Postives/m-p/577573#M8727 <P>Greetings Fellow Splunkers,</P><P>We have been recieving false reports claiming certain index, sourcetype and ip combinations that havent been communicating for a long time, however when checking over we do actually seem to be recieving a healthy amount of logs from the combination of fields mentionned above.</P><P>I have seen this in 2 other organizations aswell, what are some recommended fixes for this issue? has anyone else come across the same problem?</P><P>Thanks,</P> Tue, 07 Dec 2021 09:17:37 GMT NightShark 2021-12-07T09:17:37Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Broken-Hosts-App-Alerting-False-Postives/m-p/577573#M8727 <P>Greetings Fellow Splunkers,</P><P>We have been recieving false reports claiming certain index, sourcetype and ip combinations that havent been communicating for a long time, however when checking over we do actually seem to be recieving a healthy amount of logs from the combination of fields mentionned above.</P><P>I have seen this in 2 other organizations aswell, what are some recommended fixes for this issue? has anyone else come across the same problem?</P><P>Thanks,</P> Tue, 07 Dec 2021 09:17:37 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Broken-Hosts-App-Alerting-False-Postives/m-p/577573#M8727 NightShark 2021-12-07T09:17:37Z