How to detect if logs stopped from regular source

[WilliamF]

Hi Support team,

I just wanna check with you guys on how to detect if logs stopped from regular source?

Best regards,
Socrates Wiliam Futotana

[Drainy]

Surely as an information security engineer you know better than to post your full details on a public forum? 🙂

Have you downloaded the Deployment Monitor app? There are other ways to do it but this is a nice quick way to monitor your sources. If a sourcetype is quieter than normal then it will highlight this.