How to create delay in event timestamp?

Getting Data In

Hi ,

I want to generate an indexing latency for a particular incoming event type.

Is it possible ?

I want a delay of a few minutes between the time the event is sent and the event is indexed.

Get Updates on the Splunk Community!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...

Are you a member of the Splunk Community?