We have a list of servers we would like to know which are all not reporting to splunk. How to write a query for this.
The DMC provides this functionality. All you need to do is enable Forwarder monitoring.