https://community.splunk.com/t5/Getting-Data-In/Eventgen-Perf-Issue/m-p/540205#M90467 <P>Hello all, I need some help about eventgen, for TA_Windows I need to create some samples for testing. My Env is Splunk 8.1.1 (LInux) and TA_windows and SA_Eventgen are all the newst versions. Over 40 sample stanzas are in need, for time interval I used -15mins and now, interval 30 or 60, count for each sample is 10 or 15. The whole eventgen.conf file is pretty long about 6000 lines.&nbsp;</P><P>The issue is on Linux, always about half of samples running, some samples are never running, but there is no errors in conf. I tested again on Windows Splunk 8.1.1, the same conf file could let every sample runnable.&nbsp;</P><P>Is there some limitations maybe for eventgen conf file length or the number of samples?</P><P>Or should I design a better scheduling for each sample? If so I need some advices, has someone a design of schedule to ensure each sample could run&nbsp;regularly?</P> Wed, 17 Feb 2021 08:25:45 GMT mxyy31ruth 2021-02-17T08:25:45Z https://community.splunk.com/t5/Getting-Data-In/Eventgen-Perf-Issue/m-p/540205#M90467 <P>Hello all, I need some help about eventgen, for TA_Windows I need to create some samples for testing. My Env is Splunk 8.1.1 (LInux) and TA_windows and SA_Eventgen are all the newst versions. Over 40 sample stanzas are in need, for time interval I used -15mins and now, interval 30 or 60, count for each sample is 10 or 15. The whole eventgen.conf file is pretty long about 6000 lines.&nbsp;</P><P>The issue is on Linux, always about half of samples running, some samples are never running, but there is no errors in conf. I tested again on Windows Splunk 8.1.1, the same conf file could let every sample runnable.&nbsp;</P><P>Is there some limitations maybe for eventgen conf file length or the number of samples?</P><P>Or should I design a better scheduling for each sample? If so I need some advices, has someone a design of schedule to ensure each sample could run&nbsp;regularly?</P> Wed, 17 Feb 2021 08:25:45 GMT https://community.splunk.com/t5/Getting-Data-In/Eventgen-Perf-Issue/m-p/540205#M90467 mxyy31ruth 2021-02-17T08:25:45Z