https://community.splunk.com/t5/Alerting/Indexes-Alert-If-No-Incoming-Data/m-p/532530#M10044 <LI-CODE lang="markup">| tstats count WHERE index=myindexname earliest=-60m latest=now</LI-CODE> Wed, 09 Dec 2020 20:27:30 GMT burwell 2020-12-09T20:27:30Z https://community.splunk.com/t5/Alerting/Indexes-Alert-If-No-Incoming-Data/m-p/532515#M10042 <P>Would anyone have an up to date way of looking at all indexes and if an index has not received any data in 60 minutes or so alert? I have seen several ways of looking at this by host but would prefer to look at it from the index level.</P><P>&nbsp;</P><P>Thanks!!&nbsp;</P> Wed, 09 Dec 2020 19:05:22 GMT https://community.splunk.com/t5/Alerting/Indexes-Alert-If-No-Incoming-Data/m-p/532515#M10042 jmc94 2020-12-09T19:05:22Z https://community.splunk.com/t5/Alerting/Indexes-Alert-If-No-Incoming-Data/m-p/532530#M10044 <LI-CODE lang="markup">| tstats count WHERE index=myindexname earliest=-60m latest=now</LI-CODE> Wed, 09 Dec 2020 20:27:30 GMT https://community.splunk.com/t5/Alerting/Indexes-Alert-If-No-Incoming-Data/m-p/532530#M10044 burwell 2020-12-09T20:27:30Z