# Data source Not Sending Data

**URL:** <https://discuss.elastic.co/t/data-source-not-sending-data/267787>\
**Category:** Logstash\
**Created:** [March 19, 2021, 9:54am UTC](https://discuss.elastic.co/t/data-source-not-sending-data/267787 "2021-03-19T09:54:38Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bigranawab](https://avatars.discourse-cdn.com/v4/letter/b/53a042/32.png) [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\
**Post date:** [March 19, 2021, 9:54am UTC](https://discuss.elastic.co/t/data-source-not-sending-data/267787/1 "2021-03-19T09:54:38Z")

</div>

Hi,  
I am working on ELK stack and was wondering if a data source has stopped sending data to ELK due to any reason, how can we identify or alert team that this particular network device or server has stopped sending events.  
can we create any rule or does elk has any thing build-in for this purpose.

---

<div class="post-metadata">

**Author:** ![Bigranawab](https://avatars.discourse-cdn.com/v4/letter/b/53a042/32.png) [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\
**Post date:** [March 24, 2021, 11:06am UTC](https://discuss.elastic.co/t/data-source-not-sending-data/267787/2 "2021-03-24T11:06:48Z")

</div>

Still waiting If someone can respond

---

<div class="post-metadata">

**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\
**Post date:** [March 24, 2021, 11:12am UTC](https://discuss.elastic.co/t/data-source-not-sending-data/267787/3 "2021-03-24T11:12:44Z")

</div>

[Alerting](https://www.elastic.co/guide/en/kibana/current/alerting-getting-started.html) would work.

Should be able to monitor your index and then alert if the index hasn't been updated in your given timeframe.

---

<div class="post-metadata">

**Author:** ![Bigranawab](https://avatars.discourse-cdn.com/v4/letter/b/53a042/32.png) [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\
**Post date:** [March 24, 2021, 11:41am UTC](https://discuss.elastic.co/t/data-source-not-sending-data/267787/4 "2021-03-24T11:41:31Z")

</div>

Isn't there any other way to do this, can we use some kind of application which will give this kind of feature.  
and how can we configure an alert for this that index is not updating?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 21, 2021, 11:42am UTC](https://discuss.elastic.co/t/data-source-not-sending-data/267787/5 "2021-04-21T11:42:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.