Greetings
I have a Heavy Fordwarder that constantly sends logs to the splunk cloud but I only receive the logs in the cloud at 09, 10 or 11 pm and then at 1 or 2 am the next day I get logs every 1 minute.
The source is a fortigate I have 4 nodes, 3 work perfectly and 1 is the one that is giving me problems.
What could be happening?