Forum Discussion
Log sources down
Hi All, I'm new to sentinel and I'm trying to monitor silent log sources, for example if I have 10 ASA firewall sending syslog to Sentiel, how can I detect if one of them become silent ? I fo...
There is no query that can list all log sources. You could use a watchlist of which data connectors send data to which tables and use that to see if any of those tables have not received data in your given time span.