Use the No-Data Tool
You can refer to the following usage notes to get a better understanding of the features in the no-data tool.
The tool runs through the entire sequence of checks, regardless of any issues along the way.
The test results provide root cause information and advise where to focus your troubleshooting efforts.
While this feature is generally intended to debug a device when it is marked as no-data, you can use it any time to verify that deployed rules are receiving data.
This tool does not support rules using a syslog sensor, as the sensor data is event driven and not periodic.
The color coding for the test results is as follows:
Green = pass
Yellow = error (unable to test)
Red = fail
Any items with yellow or red status will include a message with more detail about the issue.
To access the tool: