Follow the steps below to debug using respective logs:

1.In Splunk Enterprise, navigate to Search & Reporting.

2.Search with the following search queries and a time range that covers the alert triggering time.

•Use the query below to search for splunkd service logs. NetworkBrain App logs are included as well.

oindex=_internal sourcetype=splunkd

•Add the following keywords into the query above to filter specific logs.