The **Data Audit** dashboard shows which data sources are actively feeding ES, their event counts, and latency.
Common data quality issues include: missing sourcetypes, unparsed events, and field extraction failures. The **Health** page flags these automatically.
Admins should regularly audit data sources to ensure no gaps exist. A firewall that suddenly stops sending logs is a critical blind spot for the SOC.