Splunk Enterprise

Can you nullQueue metrics indexes?

jspigler2010
Explorer

Hoping this is going to be a relatively simple one.

Can you nullQueue metrics indexes?  For example, if I am using the  new *nix TA, all performance monitoring is collected with scheduled scripts and stored in metrics indexes.  Can we nullQueue a specific sourceType at the indexer like we would an event index?

 

Thanks!

Labels (3)
0 Karma

jspigler2010
Explorer

Anybody?

0 Karma
Get Updates on the Splunk Community!

Get Inspired! We’ve Got Validation that Your Hard Work is Paying Off

We love our Splunk Community and want you to feel inspired by all your hard work! Eric Fusilero, our VP of ...

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...