I am trying to create an alert to record failed logins for the Splunk servers, however not all of them show up in my current alert.   I can get the Search Heads and one of my Heavy Forwarders but my Indexers, Deployment/License server and Cluster Master/Monitoring Console server are not reporting.  Is there something that needs to be added or enabled to these servers? ... View more

I have a Linux server falsely showing as down on Splunk Web.  I have tried restarting the Linux server and restarting the Splunk forwarder on the Linux server but the issue still remains. ... View more