Getting Data In

Is it possible to throttle events sent by the forwarder?

psofiamorais
New Member

Hi,
Is there a way to configure a throttle rule so the splunk forwarder don't send repeated events?
Let's say i want to throttle events so the forwarder only send an event after 10 occurrences, is it possible?
I couldn't find anything about it in the documentation
Thanks
Paula

Tags (1)
0 Karma
1 Solution

harsmarvania57
SplunkTrust
SplunkTrust

Hi,

There are no such in-built feature in Splunk but you can write custom script to achieve your requirement and run that script using scripted input at regular interval.

View solution in original post

0 Karma

harsmarvania57
SplunkTrust
SplunkTrust

Hi,

There are no such in-built feature in Splunk but you can write custom script to achieve your requirement and run that script using scripted input at regular interval.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...