How do I reduce the interval of data sent from DCN (heavy forwarder) to the search head?

[vinchakov_a]

I see that from DCN, data comes in with a frequency of 5 minutes. How do I reduce this interval? I use a heavy forwarder as DCN

[trapti · Accepted solution]

Data collection interval for ONTAP is defined in Splunk_TA_Ontap/default/ta_ontap_collection.conf .
You can change the intervals in this file but make sure you have identical "ta_optap_collection.conf" on all the instances.