Plus points to whomever also lets me know how to check if it's disabled, and how to enable it. 🙂 ... View more

Thank you for the feedback. I'd though about that and we are using the query "Index=* sourcetype=HiddenSourceType" still no luck. I see that sourcetype available in "|metadata" with current epoch time, but I get no results running over any timeframe. I know the data is there, it's just not letting me search through it. ... View more

You're welcome. (Friendly tip: Next time, you should consider accepting the actual answer rather than your own followup question.) ... View more