topic How do you change the checkpointInterval setting in inputs.conf to alter the interval that data is being sent by forwarder? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-do-you-change-the-checkpointInterval-setting-in-inputs-conf/m-p/444659#M77403 <P>Good morning all. I am having an issue with capturing Windows Event Viewer logs. I am getting the data but I'd like to have it sent at a different interval than the forwarder is using. I've set the checkpontInterval = setting to many different settings, but the data is updating every 3-5 seconds no matter what the setting is set to. I've posted the relevant inputs.conf lines below. Any help would be appreciated.</P> <P>thanks,</P> <PRE><CODE>[WinEventLog://System] index = windowssystemlogs checkpointInterval = 120 current_only = 0 disabled = 0 start_from = oldest </CODE></PRE> Wed, 24 Oct 2018 15:18:49 GMT davidblizzard 2018-10-24T15:18:49Z How do you change the checkpointInterval setting in inputs.conf to alter the interval that data is being sent by forwarder? https://community.splunk.com/t5/Getting-Data-In/How-do-you-change-the-checkpointInterval-setting-in-inputs-conf/m-p/444659#M77403 <P>Good morning all. I am having an issue with capturing Windows Event Viewer logs. I am getting the data but I'd like to have it sent at a different interval than the forwarder is using. I've set the checkpontInterval = setting to many different settings, but the data is updating every 3-5 seconds no matter what the setting is set to. I've posted the relevant inputs.conf lines below. Any help would be appreciated.</P> <P>thanks,</P> <PRE><CODE>[WinEventLog://System] index = windowssystemlogs checkpointInterval = 120 current_only = 0 disabled = 0 start_from = oldest </CODE></PRE> Wed, 24 Oct 2018 15:18:49 GMT https://community.splunk.com/t5/Getting-Data-In/How-do-you-change-the-checkpointInterval-setting-in-inputs-conf/m-p/444659#M77403 davidblizzard 2018-10-24T15:18:49Z