About Zacknoid

Zacknoid

Upgraded to version 9.0 facing similar issue : Root Cause(s) I ndicator 'ingestion_latency_gap_multiplier' exceeded configured value. did you find out any solution for this ?? Thanks

Zacknoid · ‎05-20-2022

We're using intermediate forwarders to send data from one level to another, as in between there are firewall and communication though one HF to another HF on another level. we're collecting all data from UF's and using HF to push it to another level with all firewall rules and policies. I am trying with DEST_KEY is _MetaData:Index . Use upper case on the left side of the = in transforms.conf. Do you have any document link referring to the same ? | THANKS

Zacknoid · ‎05-09-2022

Hello everyone, I am trying to separate data getting into the main index from particular hosts. I am trying Transforms.conf [windows_ot] DEST_KEY = _metadata_index Regex = HOst123 Format = host_wineventlog Source_key = Metadata:Host Props.conf [wineventlog] Transforms-setindex = windows_ot Do we have another way to separate 26 host's data ( without accessing the host machines ) The following data flow level 2 (Heavyforwarder) sending data to ---> level 3 (heavy forwarder) ---> main HF Is it a way to separate data in the main HF ?? also is trans conf correct ??

Posts	3
Solutions	0
Karma Given	4
Karma Received	1
Member Since	‎03-17-2022

Online Status	Offline
Date Last Visited	a week ago

How to Separate data from main index/HF?

Re: Why are we receiving this Ingestion Latency er...

Re: How to Separate data from main index/HF?

How to Separate data from main index/HF?