Getting Data In

Optimum payload size for ingesting events via splunk HEC

kkarthik_splunk
Splunk Employee
Splunk Employee

I am trying to ingest data into Splunk via Splunk HEC using a python script. I am also sending the data in batches.

What should be the optimum size of the payload(data) that can be sent in a single post request to optimize the performance of the ingestion script?

Labels (1)
0 Karma

gjanders
SplunkTrust
SplunkTrust

There is a Splunk conf presentation that covers this but I'm unsure which one. It will be on https://conf.splunk.com/watch/conf-online.html

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...