Hello Folks!
we have configured the alerts for Website and REST API monitoring, nowadays very frequently it happens, we are unable to get the data for Website and REST, and once we restart the splunk services on search head the data is visible of the missing period also?
Q1. I am yet not clear with the data flow of these types (Website and REST), is it Search Head to Indexer and then again Indexer to Searchhead?
Q2. I am not getting any warning message on UI no error in the logs file. but once i restart splunk services the data appears in usual manner and more interestingly for the missing period too.
Thanks in Advance 🙂
