https://community.splunk.com/t5/Splunk-Search/How-to-detect-if-logs-stopped-from-regular-source/m-p/40020#M178869 <P>Hi Support team,</P> <P>I just wanna check with you guys on how to detect if logs stopped from regular source?</P> <P>Best regards, <BR /> Socrates Wiliam Futotana</P> Fri, 22 Feb 2013 02:07:52 GMT WilliamF 2013-02-22T02:07:52Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-if-logs-stopped-from-regular-source/m-p/40020#M178869 <P>Hi Support team,</P> <P>I just wanna check with you guys on how to detect if logs stopped from regular source?</P> <P>Best regards, <BR /> Socrates Wiliam Futotana</P> Fri, 22 Feb 2013 02:07:52 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-if-logs-stopped-from-regular-source/m-p/40020#M178869 WilliamF 2013-02-22T02:07:52Z https://community.splunk.com/t5/Splunk-Search/How-to-detect-if-logs-stopped-from-regular-source/m-p/40021#M178870 <P>Surely as an information security engineer you know better than to post your full details on a public forum? <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> <P>Have you downloaded the Deployment Monitor app? There are other ways to do it but this is a nice quick way to monitor your sources. If a sourcetype is quieter than normal then it will highlight this.</P> Fri, 22 Feb 2013 06:04:21 GMT https://community.splunk.com/t5/Splunk-Search/How-to-detect-if-logs-stopped-from-regular-source/m-p/40021#M178870 Drainy 2013-02-22T06:04:21Z