All Apps and Add-ons

How to stop the eventgen and how to get the number of events generated by eventgen?

chitra
Explorer

i want to know the number of events generated by eventgen, is it update this count somewhere in the log file?
On restart of splunkd daemon, eventgen generating the file, how can i stop the eventgen when it reaches to specific event count?

Tags (1)
1 Solution

lmyrefelt
Builder

You can stop the eventgen (easiest) by "Disabling" the app under "App management".

To check how many events you have generated:
index=eventGenIndex | stats count

| metadata type=sourcetypes index=eventGenIndex

Not sure you can stop the eventgen after a specific number of events (with out writing a script) ... maybe it is a config question?
docs:

https://github.com/coccyx/eventgen

https://apps.splunk.com/app/1924/#/documentation

View solution in original post

Venkat_16
Contributor

The application can be disabled by commenting the eventgen.conf file with "#".

0 Karma

lmyrefelt
Builder

You can stop the eventgen (easiest) by "Disabling" the app under "App management".

To check how many events you have generated:
index=eventGenIndex | stats count

| metadata type=sourcetypes index=eventGenIndex

Not sure you can stop the eventgen after a specific number of events (with out writing a script) ... maybe it is a config question?
docs:

https://github.com/coccyx/eventgen

https://apps.splunk.com/app/1924/#/documentation

koshyk
Super Champion

disabling still generates event (i've tried sample tutorial2) 😞

0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...