Splunk® FAQ: How does data actually get into Splunk?
Forwarders, HEC, and a few other methods, explained.
https://f.mtr.cool/fgi02myh8e

Splunk® FAQ: How does data actually get into Splunk?
Forwarders, HEC, and a few other methods, explained.
https://f.mtr.cool/fgi02myh8e
Splunk® FAQ: What is the actual difference between a dashboard and an alert? One you check.
One checks on you. Here is how they work together: https://f.mtr.cool/y06yr3d7tk