"How do I solve the problem with automatic report collection and sending?" Maybe you can use the below this to check, using the metadata command this example shows if a host has not sent any data to...
See more...
"How do I solve the problem with automatic report collection and sending?" Maybe you can use the below this to check, using the metadata command this example shows if a host has not sent any data to the _internal index, this can be change to another index where you are expecting regular data to come to, and you can also change the period -5m to say 10 mins etc, you can then save this as an alert, or dashboard table to inform you when there is no data and look as to why etc. | metadata type=hosts index=_internal
| table host, firstTime, lastTime, recentTime
| rename totalCount as Count firstTime as "First_Event" lastTime as "Last_Event" recentTime as "Last_Update"
| fieldformat Count=tostring(Count, "commas")
| fieldformat "First_Event"=strftime('First_Event', "%c")
| fieldformat "Last_Event"=strftime('Last_Event', "%c")
| fieldformat "Last_Update"=strftime('Last_Update', "%c")
| where Last_Update <= relative_time(now(),"-5m")
| table host, Last_Update