A Splunk Enterprise deployment is a fairly complex system, and while it is by nature a stable, reliable, and intuitive platform to work with, things can go wrong usually because of configuration or loading issues. We'll cover a few of the most common problems you'll run across in this section, and how to detect and resolve them. However, if you're going to be maintaining a larger Splunk environment, I highly recommend that you read through the Troubleshooting Manual and take the Troubleshooting Splunk Enterprise training class, as both do an excellent job of explaining more of the technical details of how Splunk works under the covers and the various logs and other sources of information to help with troubleshooting. Here are the links to these two resources:
https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Whatsinhere
https...
