How to create delay in event timestamp?

Getting Data In

Hi ,

I want to generate an indexing latency for a particular incoming event type.

Is it possible ?

I want a delay of a few minutes between the time the event is sent and the event is indexed.

Get Updates on the Splunk Community!

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl. To make life better, use an ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...

Join the Conversation