https://community.splunk.com/t5/Getting-Data-In/Easy-way-to-adjust-the-check-in-interval-for-various-real-time/m-p/179383#M35976 <P>It's either that which you mentioned "script to change... restart...", or you could use a deployment-server &amp; app. You could also create your own Splunk app and code it with the ability to change these via the web ui. </P> Tue, 27 May 2014 15:28:26 GMT jkat54 2014-05-27T15:28:26Z https://community.splunk.com/t5/Getting-Data-In/Easy-way-to-adjust-the-check-in-interval-for-various-real-time/m-p/179382#M35975 <P>Is there an accepted way to adjust the interval of certain stanzas remotely and on the fly?</P> <P>Say, I want to casually monitor some perfmon metric most of the time but every now and again I need more accurate and timely data and so I would decrease the monitor interval. </P> <P>I am thinking I will write a simple script to change this value and restart the forwarder when needed, and tie that script to an alert.</P> <P>Any other recommendations?</P> Tue, 27 May 2014 15:08:51 GMT https://community.splunk.com/t5/Getting-Data-In/Easy-way-to-adjust-the-check-in-interval-for-various-real-time/m-p/179382#M35975 neiljpeterson 2014-05-27T15:08:51Z https://community.splunk.com/t5/Getting-Data-In/Easy-way-to-adjust-the-check-in-interval-for-various-real-time/m-p/179383#M35976 <P>It's either that which you mentioned "script to change... restart...", or you could use a deployment-server &amp; app. You could also create your own Splunk app and code it with the ability to change these via the web ui. </P> Tue, 27 May 2014 15:28:26 GMT https://community.splunk.com/t5/Getting-Data-In/Easy-way-to-adjust-the-check-in-interval-for-various-real-time/m-p/179383#M35976 jkat54 2014-05-27T15:28:26Z