topic Is throttling based on trigger time? How do we decide? in Splunk Enterprise Security https://community.splunk.com/t5/Splunk-Enterprise-Security/Is-throttling-based-on-trigger-time-How-do-we-decide/m-p/597569#M10795 <P>Hi,<BR /><BR />I have a CS, which runs every 6mins looking back -65m and -5m.. It triggered a notable alert, where for the same dest value, it triggered ten notables in the same time 11.46pm...........................<BR /><BR />How much throttle time should I set to avoid this?<BR /><BR />Thankyou!<BR /><BR /></P> Thu, 12 May 2022 11:24:27 GMT Woodpecker 2022-05-12T11:24:27Z Is throttling based on trigger time? How do we decide? https://community.splunk.com/t5/Splunk-Enterprise-Security/Is-throttling-based-on-trigger-time-How-do-we-decide/m-p/597569#M10795 <P>Hi,<BR /><BR />I have a CS, which runs every 6mins looking back -65m and -5m.. It triggered a notable alert, where for the same dest value, it triggered ten notables in the same time 11.46pm...........................<BR /><BR />How much throttle time should I set to avoid this?<BR /><BR />Thankyou!<BR /><BR /></P> Thu, 12 May 2022 11:24:27 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Is-throttling-based-on-trigger-time-How-do-we-decide/m-p/597569#M10795 Woodpecker 2022-05-12T11:24:27Z