Monitoring and discovery

Monitoring starts with an approved scope and defined sources. Review the Query Portfolio and connector health, then search runs and coverage, before interpreting evidence.