We have an issue where certain HEC feeds will burst in volume and blow out our daily ingest license. Is there an automated way to shut off the offending HEC when volume reaches a high level?
Did you get a response on this?
