Administration
Also available as:
PDF
loading table of contents...

Verifying That the Events Are Indexed

After you finish adding your new data source, you should verify that the data source events are indexed and the output matches any Stellar transformation functions you used.

By convention, the index where the new messages are indexed is called $DATASOURCE_index_[timestamp] and the document type is $DATASOURCE_doc.

From the Alerts UI, search the source:type filter for the $DATASOURCE messages. For more information about using the Alerts UI, see Triaging Alerts.