Splunk Search

Is it possible to set a sampling ratio directly in Search Processing Language?

vRman
Engager

Is there a way to set sampling ratio directly in an SPL query rather than in the GUI or Simple XML ?

0 Karma
1 Solution

pgreer_splunk
Splunk Employee
Splunk Employee

Not at this time, however there is a bit of a work around to simulate sampling within the search.

See the answers thread on that subject: here

View solution in original post

pgreer_splunk
Splunk Employee
Splunk Employee

Not at this time, however there is a bit of a work around to simulate sampling within the search.

See the answers thread on that subject: here

Get Updates on the Splunk Community!

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

SignalFlow: What? Why? How?

What is SignalFlow? Splunk Observability Cloud’s analytics engine, SignalFlow, opens up a world of in-depth ...