While making Splunk search using Java SDK, is there any way to provide event sampling value into the query.
There are some indexes with the large amount of data, which takes a long time to return the job. Please suggest a way to deal this issue.
I found a way to set it, jobArgs.add("sample_ratio", 1000); this worked for me
View solution in original post