Feature request - Status flipping due to parsing issues

[sebwurl]

Currently data sources are in a green state even if there are parsing issues detected. It would be great to have a status indicating these issues.

[guilhemmarchand]

@TonyY17

This is still being considered, there is a complexity which is that Splunk does record in the internal where the data is located, thus it renders on a per sourcetype basis.

So for example, a given sourcetype that is indexed in multiple indexes, would affect mutliple entities while perhaps only 1 data source is really impacted.

This is why originally I did not include this is part of the indicators that can influence the data source status.

Let me know your thinking

[guilhemmarchand]

This enhancement request is still under consideration.