I am ingesting Azure Activity events via Splunk Add-on for Microsoft Cloud Services and was wondering if there are any recommendations/best practices for the settings for Max Time Wait and Max Batch Size?
Thx