How to create delay in event timestamp?

Getting Data In

Hi ,

I want to generate an indexing latency for a particular incoming event type.

Is it possible ?

I want a delay of a few minutes between the time the event is sent and the event is indexed.

Get Updates on the Splunk Community!

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...