Are you a member of the Splunk Community?
- Find Answers
- :
- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- Re: How to stop the eventgen and how to get the nu...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
i want to know the number of events generated by eventgen, is it update this count somewhere in the log file?
On restart of splunkd daemon, eventgen generating the file, how can i stop the eventgen when it reaches to specific event count?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can stop the eventgen (easiest) by "Disabling" the app under "App management".
To check how many events you have generated:
index=eventGenIndex | stats count
| metadata type=sourcetypes index=eventGenIndex
Not sure you can stop the eventgen after a specific number of events (with out writing a script) ... maybe it is a config question?
docs:
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The application can be disabled by commenting the eventgen.conf file with "#".
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can stop the eventgen (easiest) by "Disabling" the app under "App management".
To check how many events you have generated:
index=eventGenIndex | stats count
| metadata type=sourcetypes index=eventGenIndex
Not sure you can stop the eventgen after a specific number of events (with out writing a script) ... maybe it is a config question?
docs:
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
disabling still generates event (i've tried sample tutorial2) 😞
Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps
What’s New in Splunk Observability – September 2025
Fun with Regular Expression - multiples of nine
