How to create delay in event timestamp?

Getting Data In

Hi ,

I want to generate an indexing latency for a particular incoming event type.

Is it possible ?

I want a delay of a few minutes between the time the event is sent and the event is indexed.

Get Updates on the Splunk Community!

Hello Splunk Community, We're thrilled to share an exciting update that will help you manage your data more ...

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...

Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Join the Conversation