Hi all I have a new update and solution.  It's called the Meta Woot!  app.  It's pretty awesome and is just what I was looking for. ... View more

Thank you kindly! ... View more

I would answer source as we will have numerous hosts in a group.   ... View more

Any chance you can share the SPL query with me so I can try it out?   Then create a dashboard with visualization.   I was planning to monitor the dozen most important sourcetypes.   ... View more

Let me re-phrase my question.  I need to know when a log source stops sending logs to the SIEM (within an hour time phase).  I felt if I had a dashboard/visualization I could quickly glance at it and notice if anything was awry.  OR get some type of email or text alert would suffice. - Any ideas from the Splunk Community? ... View more

I too would like to know the technical differences between Splunk ES and Cloud.  For instance are all the  Splunk ES features and capabilities embedded in Splunk Cloud?  If not then what ES features are missing in Cloud?  I can't seem to find any definitive literature on the subject and I am a new Splunk user/admin.   ... View more