Back to Floor
The Data Forge • Room 2
SA-AuditAndDataProtection
The **Data Audit** dashboard shows which data sources are actively feeding ES, their event counts, and latency.
Common data quality issues include: missing sourcetypes, unparsed events, and field extraction failures. The **Health** page flags these automatically.
Admins should regularly audit data sources to ensure no gaps exist. A firewall that suddenly stops sending logs is a critical blind spot for the SOC.
Knowledge Check
Prove your understanding to clear the room (Rewards XP)
Explain data source validation in ES.
The Data ______ dashboard shows event counts and latency for each source. A firewall that stops sending logs creates a ______ spot for analysts.