Proxy logs gaps solution?

Alerting

Hello guys ,

We`re encountering some log gaps from our proxy into Splunk periodically , so when they`re back , the usecases are not detecting anything for that previous period . How did other companies fixed that ? How is the best way to handle that , when the logs are back , with the minimum of resources ? Do we need to change the start date and end date ( of the log gaps ) manually every time it happens , and run the usecases again ? Or it`s any other more useful solution ?

Thank you!

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Reuse: Word-play

This puzzle series (first published here) is based on analysing words.Some of the statements in your puzzle ...

Tuning Edge Processor in Hybrid Mode: What Limits Each Data Path

When you run Edge Processor in hybrid mode, alongside a Splunk heavy forwarder on the same host, two questions ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...