After adding "initCrcLength=1048576" this issue got resolved but when sources got overwritten, the unique source count got reduced in search head. ... View more

Sorry - I forgot you have it under a powershell stanza. If you can't make that work, maybe you can run it under a script stanza where you could use the interval=0 setting powershell -executionPolicy RemoteSigned -command .$SplunkHome\bin\scripts\metric.ps1 ... View more