When reporting a Support case, please provide the following information:
Help us understand your environment:
- Specify if it is Splunk Enterprise (on-premises) or Splunk Cloud.
- Splunk Version and App/Add-on version.
- If possible and wherever required, mention the components, where the Add-on is being used, like SHC, HF etc.
If something broke or the performance is not up to the expectations, it will be helpful to understand these factors:
- If possible, mention the date when the issue was first observed for narrowing down the investigations.
- If there were any recent changes like Add-on/ Splunk Upgrade or New/editing an existing configuration/s.
- Mention what is affected: WebTx / Events / Alerts (and sub-specifics types).
- Enable the debug logs (Configurations > Loggings), try to monitor for sometime or reproduce the issue again and then share the Diag from the affected instance.
Mention the name of the inputs, and if there are many configured for the same type.