Please be more detailed about the problem you wish to troubleshoot. What is your Splunk architecture like (standalone, indexer cluster, etc.)? How is data being onboarded? Why do you believe data is missing? How have you tried to find it? What troubleshooting steps have you tried already?
---
If this reply helps you, Karma would be appreciated.
