https://community.splunk.com/t5/Getting-Data-In/Stop-Splunk-Forwarder-when-log-limit-reached/m-p/41448#M7697 <P>Hi,</P> <P>I solved the problem with using limits.conf (max troughput).</P> <P>greetings</P> Wed, 22 Aug 2012 11:01:33 GMT nebel 2012-08-22T11:01:33Z https://community.splunk.com/t5/Getting-Data-In/Stop-Splunk-Forwarder-when-log-limit-reached/m-p/41447#M7696 <P>Hi there,</P> <P>is there a way to stop a Splunk Forwarder when its sending more then for instance 2 GB ?<BR /> From a SearchHead I could configure an alert which appear if a Forwarder logs more than 2 GB. But after appearing the alert, is there a way to stop the Splunk Forwarder deamon via REST API or start a other script which can stop the Forwarder via Port 8089 ?<BR /> The problem is I just can reach the known ports, I can not access via SSH to the Forwarders.</P> <P>Thank you</P> <P>Regards</P> Wed, 22 Aug 2012 08:11:59 GMT https://community.splunk.com/t5/Getting-Data-In/Stop-Splunk-Forwarder-when-log-limit-reached/m-p/41447#M7696 nebel 2012-08-22T08:11:59Z https://community.splunk.com/t5/Getting-Data-In/Stop-Splunk-Forwarder-when-log-limit-reached/m-p/41448#M7697 <P>Hi,</P> <P>I solved the problem with using limits.conf (max troughput).</P> <P>greetings</P> Wed, 22 Aug 2012 11:01:33 GMT https://community.splunk.com/t5/Getting-Data-In/Stop-Splunk-Forwarder-when-log-limit-reached/m-p/41448#M7697 nebel 2012-08-22T11:01:33Z