@richgalloway Thanks for your response. But I wanted to monitor it for specific alerts. ... View more

Hi @ITWhisperer , I was looking on an alert to notify, if any host stops sending logs. https://www.splunk.com/en_us/blog/tips-and-tricks/how-to-determine-when-a-host-stops-sending-logs-to-splunk-expeditiously.html?locale=en_us It seems to be a complex query with combination of commands and function. If we have some complex alerts like this in production environment, how our appliance gonna sustain? So wanted to check a way, we can monitor resource when alert like this triggers!   ... View more