Archive

How to detect if logs stopped from regular source

WilliamF
Engager

Hi Support team,

I just wanna check with you guys on how to detect if logs stopped from regular source?

Best regards,
Socrates Wiliam Futotana

Tags (1)
0 Karma

Drainy
Champion

Surely as an information security engineer you know better than to post your full details on a public forum? 🙂

Have you downloaded the Deployment Monitor app? There are other ways to do it but this is a nice quick way to monitor your sources. If a sourcetype is quieter than normal then it will highlight this.

0 Karma