So I have Splunk Cloud, but we still use a Heavy Forwarder, Universal Forwarder and a Deployment server. The UF server has definitely come into hand for grabbing local data. However, I'm not sure what the Deployment server is for. We do use the Heavy Forwarder for various things.  Does anyone have documentation of what is necessary and what is a nicety? And do they have knowledge on the specs needed?  ... View more

Is there a way to track when an index stopped bring in data? I just noticed that one of our indexes is no longer bring data into Splunk.  Is there a command where I can find last known time? I have been able to track it manually back to day of when it stopped receiving data.  ... View more

Say I'm just trying to find if anything in Splunk is showing number "12345678". Isn't there a way to query a simple search trying to find that?  Or if I'm looking for a specific user; is there a way to write a query like "jsmith@gmail.com". Essentially looking for anything associated with this username or anything associated with that number above.  ... View more

I just installed this app and found it simple to setup...but I must be doing something wrong. I've created Trap information on my two UPS devices and haven't had any luck bringing them into Splunk. I enabled SNMP, all versions and then I added the IPs for the Traps to point to and included my splunk cloud DNS name, Deployment IP, HF and UF and haven't seen anything come in.  It also says the default sourcetype it has is snmp_ta Activation Key * Using 14 day free trial Log Level INFO  SNMP Mode Listen For Traps (I've also tried DEBUG) SNMP Version 2C I left everything else blank except  SNMP Trap listener settings I put the IP address of the UPS I'm trying to get the information from.  ... View more

So I have migrated to Splunk Cloud, but still have a Deployment server, UF, and HF. How do I find out what my IP is for Splunk Cloud?  I'd like to be able to send Trap information directly there. Especially since the UPS keeps saying failed to find DNS name.  Thank you.  ... View more

Can't I just search an IP within Splunk with no syntax, just 192.15.10.1 and if there is any data or this IP is simply being accessed by one of our users, then I should be able to see it. Are there better ways to find it?  Overall I want to see if two specific IPs are connecting to Splunk, if so, then broaden the search.  ... View more

Hello, My goal is to create a ping test for several cameras we have onsite. I'm looking for advice on this issue. We are using a software called Genetec for our cameras (not sure if this can be integrated with Splunk nor if it is completely necessary).  Details: Currently I have Splunk Cloud (3 on-premise Hosts AWS) Cameras that connect to a physical router at our office. I have access to the physical router used by the cameras.  Private IPs within a VLAN.  I have access to the cameras' private IPs and can ping them when connected to our VPN.  Genetec software used for our cameras.  Goals: Create Alerts when the cameras go down via a ping test. Possibly create a dashboard showing each's camera's availability (meaning if it is on or off)   ... View more