Is it possible to provide event sampling in splunk SDK call?

[ashiqm]

I tried to pass sampleRatio parameter in JobsArgs, but no luck. Is there any way to set sampling ratio in Splunk job?

[damien_chillet · Accepted solution]

I managed to have it working with parameter "sample_ratio" and python SDK.

Code sample below for 1:10 ratio:

job = instance.jobs.create("search index=_internal component=* earliest=-1d@d", **{ "sample_ratio": 10})

[ashiqm]

Hi Damien,

Thanks for your reply...

In this case, I can't supply the arguments, right?

my current code is something like this job = splunk.getJobs().create(query, jobArgs);

I have some arguments like timeOut. Any idea?

[damien_chillet]

Hi ashiqm,

Unfortunately I don't work with the Java SDK.
Apparently there is no existing setter method for sample_ratio, so you would have to write your own.

May be worth it to re-ask your question specifying you are using Java SDK so Java SDK users get visibility on your question.