How to create delay in event timestamp?

Getting Data In

Hi ,

I want to generate an indexing latency for a particular incoming event type.

Is it possible ?

I want a delay of a few minutes between the time the event is sent and the event is indexed.

Get Updates on the Splunk Community!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...