https://community.splunk.com/t5/Getting-Data-In/Heavy-Forwarder-Queue-events/m-p/118049#M24544 <P>Can a heavy forwarder be configured to queue event data and hold it until a specified time? Can some data be queued and other data be forwarded immediately?<BR /> To reduce network traffic throughout the day I want to queue some data at the heavy forwarder and deliver it on off hours, like 3am.</P> <P>Thanks.</P> Thu, 03 Apr 2014 00:24:02 GMT Bill_B 2014-04-03T00:24:02Z https://community.splunk.com/t5/Getting-Data-In/Heavy-Forwarder-Queue-events/m-p/118049#M24544 <P>Can a heavy forwarder be configured to queue event data and hold it until a specified time? Can some data be queued and other data be forwarded immediately?<BR /> To reduce network traffic throughout the day I want to queue some data at the heavy forwarder and deliver it on off hours, like 3am.</P> <P>Thanks.</P> Thu, 03 Apr 2014 00:24:02 GMT https://community.splunk.com/t5/Getting-Data-In/Heavy-Forwarder-Queue-events/m-p/118049#M24544 Bill_B 2014-04-03T00:24:02Z https://community.splunk.com/t5/Getting-Data-In/Heavy-Forwarder-Queue-events/m-p/118050#M24545 <P>Nope, it cannot. You could use external scheduling mechanisms like cron to have the forwarder stop or start at certain times, but the forwarder itself has no functionality like this.</P> Thu, 03 Apr 2014 06:49:52 GMT https://community.splunk.com/t5/Getting-Data-In/Heavy-Forwarder-Queue-events/m-p/118050#M24545 Ayn 2014-04-03T06:49:52Z