https://community.splunk.com/t5/Getting-Data-In/Domain-controller-data-ingestion-delay/m-p/532376#M89506 <P>Set <FONT face="courier new,courier">maxKBps=0</FONT> on the forwarders on each DC.</P> Tue, 08 Dec 2020 18:58:24 GMT richgalloway 2020-12-08T18:58:24Z https://community.splunk.com/t5/Getting-Data-In/Domain-controller-data-ingestion-delay/m-p/532347#M89502 <P>Hi, facing issue with&nbsp; data ingestion for the windows security events from the domain controller servers</P><P>index=wineventlog source=WinEventLog:Security</P><P>any suggestion, solution here?</P> Tue, 08 Dec 2020 15:25:28 GMT https://community.splunk.com/t5/Getting-Data-In/Domain-controller-data-ingestion-delay/m-p/532347#M89502 rahulg 2020-12-08T15:25:28Z https://community.splunk.com/t5/Getting-Data-In/Domain-controller-data-ingestion-delay/m-p/532370#M89505 <P>so far I have tried, below windows addon changes as per the splunk<BR /><BR />[WinEventLog://Security]<BR />evt_resolve_ad_obj = 0<BR /><BR />and change&nbsp; limits.conf<BR /># selt maxkbps to 4096<BR />[thruput]<BR />maxKBps = 4096<BR /><BR /></P> Tue, 08 Dec 2020 18:19:51 GMT https://community.splunk.com/t5/Getting-Data-In/Domain-controller-data-ingestion-delay/m-p/532370#M89505 rahulg 2020-12-08T18:19:51Z https://community.splunk.com/t5/Getting-Data-In/Domain-controller-data-ingestion-delay/m-p/532376#M89506 <P>Set <FONT face="courier new,courier">maxKBps=0</FONT> on the forwarders on each DC.</P> Tue, 08 Dec 2020 18:58:24 GMT https://community.splunk.com/t5/Getting-Data-In/Domain-controller-data-ingestion-delay/m-p/532376#M89506 richgalloway 2020-12-08T18:58:24Z