How to create delay in event timestamp?

Getting Data In

Hi ,

I want to generate an indexing latency for a particular incoming event type.

Is it possible ?

I want a delay of a few minutes between the time the event is sent and the event is indexed.

Get Updates on the Splunk Community!

This puzzle series (first published here) is based on analysing words.Some of the statements in your puzzle ...

When you run Edge Processor in hybrid mode, alongside a Splunk heavy forwarder on the same host, two questions ...

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Join the Conversation