$ 0 0 Im not seeing any way Splunk will notify regarding automatic detention, which usually happens because of disk space issues