Archive

Is it possible to throttle events sent by the forwarder?

psofiamorais
New Member

Hi,
Is there a way to configure a throttle rule so the splunk forwarder don't send repeated events?
Let's say i want to throttle events so the forwarder only send an event after 10 occurrences, is it possible?
I couldn't find anything about it in the documentation
Thanks
Paula

Tags (1)
0 Karma
1 Solution

harsmarvania57
SplunkTrust
SplunkTrust

Hi,

There are no such in-built feature in Splunk but you can write custom script to achieve your requirement and run that script using scripted input at regular interval.

View solution in original post

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust

Hi,

There are no such in-built feature in Splunk but you can write custom script to achieve your requirement and run that script using scripted input at regular interval.

View solution in original post

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!