Good morning. I added new PRD Splunk forwarders and sourcetypes last Wednesday night, June 9. I can see the events in sourcetype list, but I cannot see the events listed at all when using search for sourcetypes starting with "sens2". We have been conducting load tests since last Thursday, June 10. We also can't see the events an hour ago.
User=user_sens, no events listed for sourcetypes "sens2-ntfapi-dsl-order", "sens2-ntfapi-api-order-async", "sens2-ntfapi-api-order-async-performance", "sens2-ntfapi-api-basic", "sens2-ntfapi-api-basic-performance"
since Thursday last week. The count shows a lot of events collected. We only started logging last Thursday to PRD Splunk.
