Our connectivity to Check Point was broken for a few days. As a result, Splunk has a gap of time in the data. Data is flowing now, but we'd like to be able to retrieve the older data from that timeframe. Is this possible?
↧