Splunk Search

Is it possible to set a sampling ratio directly in Search Processing Language?

vRman
Engager

Is there a way to set sampling ratio directly in an SPL query rather than in the GUI or Simple XML ?

0 Karma
1 Solution

pgreer_splunk
Splunk Employee
Splunk Employee

Not at this time, however there is a bit of a work around to simulate sampling within the search.

See the answers thread on that subject: here

View solution in original post

pgreer_splunk
Splunk Employee
Splunk Employee

Not at this time, however there is a bit of a work around to simulate sampling within the search.

See the answers thread on that subject: here

Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...