Question: Checking last source check-in

[gsmith]

Hey @justassabas

Not sure thats the awesome part of Graylog-Sidecar thou. I have created a widget to notifiy me when source count drops, BUT to know right away which node it is , Im not sure. Maybe this might help.

Alerting/Notification when certain sources are not reporting

Here is a suggestion : Create an event definition that runs every X minutes (define X as you see fit). In aggregation, define a condition based on the card() of the “source” field. If it is anything less than your number of sources, fire an alert.