How to create delay in event timestamp?

Getting Data In

Hi ,

I want to generate an indexing latency for a particular incoming event type.

Is it possible ?

I want a delay of a few minutes between the time the event is sent and the event is indexed.

Get Updates on the Splunk Community!

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Are you a member of the Splunk Community?