Is there a way to get alerts when routers or switches go down on your network or any endpoint?
V/R
SD
Probably. Of course, the device must be sending data to Splunk first. All that is needed is a search that looks for data received in the last hour, but not in the last n minutes. It could look something like this
| tstats count where index=* earliest=-70m latest=-10m NOT
[ | tstats count where index=* earliest=-10m latest=now by host
| fields host | format ] by host
| table host
The TrackMe app (https://splunkbase.splunk.com/app/4621) can help with this, also.