Need to pull "Phone Home: Later than Expected" into a Dashboard report

New Member

Hello all,

I am trying to create a dashboard that will include the "Phone Home: Later than Expected" as a table. Currently in Settings > Forwarder Management I can see that information, but I am unsure how Splunk is pulling that data.

Does anyone happen to know what Splunk is running to extract that or something similar?

Thank you in advance.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...