From a colleague on our team -
Does anybody have any info (links) on the component messages (DateParserVerbose,LineBreakingProcessor, etc) of the _internal index and their meanings? I am working on dashboards that use them and interested in what they mean. I can't find any documentation on these. I am interested if there is a link out there to a list of the messages and their meaning.
Hi dddillic,
you are looking for this https://docs.splunk.com/Documentation/Splunk/latest/Data/Resolvedataqualityissues#Event_breaking.2C_...
Also, check out the MC dashboard https://<servername>/en-GB/app/splunk_monitoring_console/data_quality
which will give what you want to create as dashboard.
Hope this helps ...
cheers, MuS
Hi dddillic,
you are looking for this https://docs.splunk.com/Documentation/Splunk/latest/Data/Resolvedataqualityissues#Event_breaking.2C_...
Also, check out the MC dashboard https://<servername>/en-GB/app/splunk_monitoring_console/data_quality
which will give what you want to create as dashboard.
Hope this helps ...
cheers, MuS
Much appreciated @Mus.